{"report_id":"2dc2db0f-9023-4e89-a0e8-f4227748864d","version":0,"status":"done","tags":[],"date":"2026-10-07T15:19:35Z","url":{"schema":"https","addr":"rdhair.live/","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rdhair.live/sa","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"title":"Riyadh Air Platinum — تجربة سفر استثنائية","dom":{"size":101891,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37623)","md5":"a8e56f125fbe89bfd6b70d03f027bc33","sha1":"7ddc999de301745116dc85104f417d1e92c60bae","sha256":"eccaad57565a139942925fb867cf5b8ffd4798f498dd0f83c0b69fdc43ed3f95","sha512":"f7878e1a5d512986f0770c88c363429f9d3d4c6ee23ccad768b014c8166e1bbf5343a235e695c9390f7e3976720133a0db6dccfd9a7be4b77752565187b0d691","ssdeep":"1536:50QA3QABQA1AjabYDnB6DOlQAHFJ5ywUQW0DgDbAb9yYwba7Xx8:5P+iJUrvw9WW7m","tlshash":"74a34be05224067da5038fddc2e5b738f47bacdbd953e428b2c6061742c39999e5e2f4","dom_hash":"domhashfd08543e3b782ade58217d835e8082a7","first_seen":"2026-10-07T15:19:47.749322Z","last_seen":"2026-10-07T15:19:47.749322Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rdhair.live/","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T15:19:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"rdhair.live","ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-07T15:19:40.161758Z","last_seen":"2026-10-07T15:19:40.161758Z","alert_count":0,"request_count":37,"received_data":6932628,"sent_data":18036,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rdhair.live/static/js/popup.67878afb.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2982f7266a0683b19566bd514adeb9c3","sha1":"70773c4e470596d6ca60925d6263754b163cd246","sha256":"82bd337db34f30ef8998804aeec3873f48af98fc7ef420374611f197e2a343fa","sha512":"72de6e1353190aa360547772027fabe89e3e3a1b910ac63a3a60fc384b20c0d359f53c66cc4b1c3373bef5d0ca71148dd5af45d772c228cda4f02ae6445b3b59","ssdeep":"","tlshash":"bd01fd48a1a0bde8a03f098ac2aed54d633ebec49a248cb4b56c78010b414bc5b07ba4","size":756,"data":"","first_seen":"2026-02-19T04:44:57.795886Z","last_seen":"2026-10-07T15:19:47.799749Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/200.ae0003d6.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f42332d3321bd88eec9f9a8975bfa44","sha1":"9f48b0e25b0847a40ee5032ebcadf457f684edb8","sha256":"f99ccd22fb419326e25c69e331a310458cdcda2c6fc648596f39bc6bf6445a66","sha512":"f671299c8563021458b2b6ffb87d4181481f7bd0797f5b179207e4b3c98510dde37ce6ba8f08f27581e25f8bd0789b67b21a4627f104f53f3bde0c09f53d6e4e","ssdeep":"","tlshash":"8d616380b295b9b861c381e890bf7607f139351b307ef094d7a2c5f0b4b449a6536ebb","size":3266,"data":"","first_seen":"2026-02-19T04:44:57.809306Z","last_seen":"2026-10-07T15:19:47.823052Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/testimonials.465fc79b.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a24c6874ad5d9593d807dcbdbe039f25","sha1":"4c76e397b2239def264ffbb1ec5d13ffde330c3e","sha256":"1dd3fe54b658c414e948723e829a28bc23bcd31a7f580c30a26a104a76e15f59","sha512":"3ff3f32f46048dbd6131f1c3b8df1ea1e52d45a272afcdc5c2228eacc18e60a022cf8ba5dbe473357aa4d03bbb6215b4ba96db712a886c970e42b32afc961c56","ssdeep":"","tlshash":"6a61b383c1b03ffcb56b16a19e4f808db21a1f14d50d88a4b5f538182659cbc6a62bf8","size":3175,"data":"","first_seen":"2026-10-07T15:19:47.811431Z","last_seen":"2026-10-07T15:19:47.811431Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/235.1a9a842d.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b321b34a3063f8912eb7705057e1c76","sha1":"1ad3bebfabd32558deaa33ab77e6822c40845fef","sha256":"9961ce1ace21bbca9efdc54a3641236385ebbade26227172ecf21eb4b5eeab38","sha512":"3426ad1cf2158bd329c680b9a07f853bdac0766b03c149f144b69efea010b9d0fccd12ccefdb5b0fb9b44cb1d0e8318517e267ab6bebef920825f668dd942a05","ssdeep":"1536:BzfGIoKMmSmVy4JQeD9BlxvHk7+NEosXiA6wPXNHAgdmpIW9kjZC:BHMuR0CSXmn","tlshash":"5d831989a130b57692e715cb83a5c111b3b24905b949c4e4b1bd8cbb987dd9803feefc","size":87288,"data":"","first_seen":"2026-02-19T04:44:57.762451Z","last_seen":"2026-10-07T15:19:47.84442Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/328.9d01be77.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d705fa6c619fd9b193a5511c4e0b0b3","sha1":"369216dc9134b8b7e408b29fa6fbfcacdddcc539","sha256":"0fbcd4a22f47ee3a4f89b292f91076c53dd657d32e014233ce18be8d98f9f710","sha512":"d0f743e05fda2357d9f483bcded594f262403ecb3594d41ead5e6e20b973bba9454ddeb3b81b9e5a854ccc2b5e63cb33706b72c2beb9fb6a5d1737e12d33b6cc","ssdeep":"384:8KUo1vN/G8CWUCjUNwM4ydtX27udLV0MK0nGH5RCEZYXi9SiN:vXvN/G8CWUCINwM4ydtX27udLqMK0net","tlshash":"2b52fa447193f899ab570ce1947f810db1346a48b54fc870b36c6c872a3924bb597f3d","size":14313,"data":"","first_seen":"2026-10-07T15:19:47.769295Z","last_seen":"2026-10-07T15:19:47.769295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/67.1aee5820.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2462031ba811fd6d6d05cce44b9fd595","sha1":"708f0a8674f147667004a965fc367c7a486491f4","sha256":"027c9cb485720bcca2392d38cb6c020da24200877e26e3e1109909fbee563f50","sha512":"89c51e2401ba207c74f17e795009e25189914131e2132fdea56c87f5ff53c5e87f5d4171f2c85a10b53386abfef3046a596d1d262fd6009a8d4087b7729f931c","ssdeep":"","tlshash":"b141e6c9ebe5aaecbc290dd6a41da41c761b6f9ec73a49f4b8b42c0005050e47a17bdd","size":2057,"data":"","first_seen":"2026-10-07T15:19:47.841266Z","last_seen":"2026-10-07T15:19:47.841266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/312.a99011bf.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f66dcec44de350b123cd02da03d243c7","sha1":"22938f99469149cc7396097a812b5a9e8b45154c","sha256":"3f70647f0a8751d3c599ec27c7b18be71d9b7ed8466a6eaeb1452d76cdd1356d","sha512":"4a5a3b29436ebb2c0461cc1e6c1d27688933dca7d031335bf95eb5f77288bc5e0ee855958a9c63a070c406a2f78b0632942f5367f500a53a296042837166c1be","ssdeep":"768:kiNYBQMURuqN9jMUUKZN1tOhfgsjKgpWAmfc:53NaKgpuc","tlshash":"18e2005b872e5faeb51ffcc2da5f8b0ce26d2f05ba99d874ecdc59510090042b672358","size":31252,"data":"","first_seen":"2026-10-07T15:19:47.831163Z","last_seen":"2026-10-07T15:19:47.831163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/722.94a5da76.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd9163dcd8ca6bdbd9de192c270be30","sha1":"9677b93c8cb44ffd7459c815452450ef517f94f9","sha256":"c2b7960c906f797d54fb5f8b1e261cdf92ab447d5f7d15c759df824a1fd8191b","sha512":"91e5f0d532493473ba620bab6f325a48206d811a17b6707d933bba2d1546ac3e471f3ac1a128dfd1258614bcfed5e9a1da3bdb4fc5f9c6bf3f8e8b901306c41b","ssdeep":"768:0bsPlgqszZUYcO/+uPOwhNzx5VIvKiX05dJ8QJZgm7R2KBOaIJZAiFF87bauRIat:UdDfgbbAoeKoc4w2oc","tlshash":"300307c536d1b0a153aa64f5447f0507f33aa915780d84a4f128aceb6cb640ea7bbf7c","size":38590,"data":"","first_seen":"2026-10-07T15:19:47.806284Z","last_seen":"2026-10-07T15:19:47.806284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/benefits.663c628f.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"173876376dbd8173b384ad7ae619a670","sha1":"f006694c89ce18eab65f7da05c47ad86639f2ed8","sha256":"5f3c2f54bf04ebe65edf6fc8207c37cce56d19d107ccdddb3a0ed0c690adaaa1","sha512":"cd5843740128490e92c3bcc34191cbed2484ec7236cb558c79b457ce1120a5ac5ea0846cf526159172977de82462be8901999c61289ef4691ce4345aacc0cb35","ssdeep":"192:2ScP9sC36X2FRG6nAoaBl6R9BzOkNuRjcEDi7Qv:2ScPyC36XsTM36R9BakNLju","tlshash":"f602e64c82603eaf7f2105516d8fe288d25d8e44fb8ac078bf7c340d16d52966637be9","size":8628,"data":"","first_seen":"2026-10-07T15:19:47.809737Z","last_seen":"2026-10-07T15:19:47.809737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/257.c0a1749e.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a66eb2aa3e1e9c000a5b6f5b9abeb2bf","sha1":"e3ac979d7bdf8b14ce6b32078d199b5ac9a6d6dc","sha256":"e5d95e287782e2e66099e7000150d0e154d9531ca1bff981d4a32e0dd17f8890","sha512":"6ac0055e729df299f65e1953109c86b68011d070f4887ceb22fedcd521953afa4dbcbc9f2d2090bf806b27c58c0852e05b0e5af50b7ae16d5830958a1cf05698","ssdeep":"768:Hq5A4hUlT8eQVXRSPecTp+onzaG3jC1Xue0Kcz3B8a0D8NaZGNwcONY/dVSya3Ln:BRQZF6aVY+Zn","tlshash":"9db209d893546af97501dfecde075818392e25b5af83c5a4d3989c2aa0100d8af4efd7","size":25484,"data":"","first_seen":"2026-10-07T15:19:47.807826Z","last_seen":"2026-10-07T15:19:47.807826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/782.da77e714.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aab2f9bba8f85db2298f09219859bda4","sha1":"2b605722f51ba5fa7be90e3ca4066eb8119dfdf4","sha256":"aee321ff6191648bef180374403e1cc5290a881bd9a6fd8597893affc6c3315a","sha512":"4a24e5d337dcac0b643168ab0a78e96e41e7023b2e472f176f0aaa9c2d72fbe8702689248e70cbfc0dcf3003382eb047d755c3ae899e8ae9fba90fd3762d382b","ssdeep":"384:6B+8H32zoxeVQpnaN9GcGE4BpFDnm8z4iuo4Cm16aOTsPzlA0bQXPrIMY:6M8H32Y3TEQnPzrXPrIMY","tlshash":"d4a208d8b65071978bb7127284df4206f275676a188f9524b13ae0d82cb881d537ff3d","size":23199,"data":"","first_seen":"2026-02-19T04:44:57.784316Z","last_seen":"2026-10-07T15:19:47.828411Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/video-preview.77e71c19.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d91a2b785fcd77369d2c362e92c08829","sha1":"a29412356abaa45869ea096359dc759252f8282c","sha256":"b68eddefc084010e8584d093935c6bda88c7a68c3d7fa59b5353c42544794372","sha512":"6aa198f35ead0370a1e093278206bb1e53b0439564f82b9dbc8333cf24953bb34dbf80d30514b100d55f0f8850ab0387a108451dcced449f545d8a6ffea20b23","ssdeep":"192:KhVeN2Qvcz9OnoxRRv/jLCqECUvifeicZM5hscuUqWtr0FljPhBAjqeYhPjOIaDw:eVQnoZv/C7CarZMYsqer0Fj3q1xs","tlshash":"6622098891933caa92bb49d5157b810a713e2da87d57cc54f3be2c4a27004d8b4dbfde","size":10187,"data":"","first_seen":"2026-10-07T15:19:47.777934Z","last_seen":"2026-10-07T15:19:47.777934Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/faq.980a6338.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91262b5cf9db23487f617c3c8d69b9e3","sha1":"9e4994492096708cdff437f1968be0c1f7ebb1ba","sha256":"5afafc4a99a5386e51af586fd3d83ab2b7df9dc32e9df3813d4e768efe05b6b3","sha512":"9f7e5797931d640b641cef5f78fe8b2f2df65e193ffa7bcd919543fbbcb651237bc2a9457042b5e722c10810f94fca5722b906f8853437c31bcbb26a6146fca2","ssdeep":"96:bFSW5BJq8lBs1Yhl4u/U6OScr34EzTJAkzlg3DFLO9Q7xpdvKV:UW5BVlBOYfzOScrFzdAIuJ/ZO","tlshash":"12a1e84ee4d12fb8382302896e8f550d792d6f28d71f0ce076a9108a02546ee3663bcd","size":4957,"data":"","first_seen":"2026-02-19T04:44:57.798311Z","last_seen":"2026-10-07T15:19:47.814034Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/main.c324c152.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d67c98a8ff86e75eba402bafedb79c78","sha1":"b8c8f33ee7d734ffa35896e0e51bcbf130155d84","sha256":"950b156fa96cfe4abfcfce870ec9cdd66f6bf5e1e0c71ffa492327a605202593","sha512":"7c7b20f2425e04bdf56f4ee2640c4428a8d878de55ea378c72639f9804a4991c1af0a8f59c89e9c42f905c2ff227304dcce1d63efc1b5d9e46d8857e98a777ee","ssdeep":"6144:YMjNN2WEEwho1attIhH201NBfZ8Gk6QCOQwi10PUEAaBWoJNRNXj:YMjNhw/ufOO0PUtoJNfXj","tlshash":"ffd408c477b27559169a978280bfcd8d62352cc6240ec0347b3cabc9913864d7a6fbb7","size":627212,"data":"","first_seen":"2026-10-07T15:19:47.797029Z","last_seen":"2026-10-07T15:19:47.797029Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/184.c44e07e8.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"604778751cb87910193fcc91087e3c07","sha1":"737a0e225ad27402de0d0066e153282bc687d102","sha256":"197fb311315661138129461077eb1d266e289663f992b7030fb39ad408e347ce","sha512":"fc4bcf27a2be7e1edff3caf0507b12a8f9fcbda286b47bf71bf1f859fd17c6e9660c9469bf583b38d507bdee430e76af0d7ec3b38625799d03e3dbaba247c0da","ssdeep":"192:XGMG+HJg15hlpur+m9Tnx8E00U9IcHZSN2mGqRZAOpLFC5g5i3QzKclqim:XGX+HJg15/pI7rSE2H5SN22RpPiylqim","tlshash":"e732e895f31473bc59c203b0c6762141b65f259e31da91b8a2f1c9e0b2875dce1bb8ab","size":11158,"data":"","first_seen":"2026-02-19T04:44:57.794714Z","last_seen":"2026-10-07T15:19:47.780652Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"🌐 i18next is maintained with support from locize.com — consider powering your project with managed localization (AI, CDN, integrations): https://locize.com 💙","filename":"https://rdhair.live/static/js/main.c324c152.js","line_number":2,"column_number":304779}]},"http":[{"url":{"schema":"https","addr":"rdhair.live/cards/plane.png","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:04.989Z","timestamp":1791386344989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /cards/plane.png HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Oct 2026 18:16:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e980-20ad13\"\r\nexpires: Thu, 05 Nov 2026 10:38:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103225\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HBjJQoXVp%2BW4wsxp5k%2BiBXjOfvMBkQGi7nekgi%2FUjQMCRXBbUCNmu8KVSkYTrBnu%2B18p3%2BVZg1DfEyUIZwaJ4wsfKwmJk5UY40UuZaMGR%2Bux0IgB7MokoM8RoC%2BqaA%3D%3D\"}]}\r\npriority: u=3,i\r\ncf-ray: a46de1d03aab0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2141459,"size_decoded":2142932,"mime_type":"image/png","magic":"PNG image data, 1862 x 1047, 8-bit/color RGBA, non-interlaced","md5":"2c723150fbb796361121f9a7269dce45","sha1":"63a10697ab10c0e39034abd0bead50b977817336","sha256":"33c3f9d97168d6aa2a2f35487ba55ea96e453fb8d81db35a079873908a6a56fd","sha512":"5b73f05cbc1f8b3bbbd2b4d90376469aad0053d6fe28d8f8620b0b18da5c64f9ccb359d3c1826409ea3e32e04be519c907afc84b2519802ac8fcb5f9fdcb3069","ssdeep":"12288:JW/l3GoAcMf8wWO/wtkrRuM/5XH7r+mnxY7+10qT6Q3Tmj+XeWPcuKBx2sXVSg20:JWd3l/MTPN/5rLCqbqjaVP9WTj5QE","tlshash":"13253395b09f4e76ebf6df4bd5897312da039ce5110538d3669030b42b96f038a3e28e","first_seen":"2026-10-07T15:19:47.758731Z","last_seen":"2026-10-07T15:19:47.758731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/328.9d01be77.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:12.866Z","timestamp":1791386352866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/328.9d01be77.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60175-37e9\"\r\nexpires: Thu, 08 Oct 2026 03:19:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGhCJzorzfW4MW6MEGH4t15CfRkjBojcIUUqNpiZKZ1BCJfh0%2FWqKfj2PAttKgtxc0Z2JQzMCHY%2B8Ja9vjMXouiH8u3nPbGE%2FEwwTKWJzDPnQwCiH%2Bcyl9urLediKA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de2016ed50b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14313,"size_decoded":6821,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14266)","md5":"5d705fa6c619fd9b193a5511c4e0b0b3","sha1":"369216dc9134b8b7e408b29fa6fbfcacdddcc539","sha256":"0fbcd4a22f47ee3a4f89b292f91076c53dd657d32e014233ce18be8d98f9f710","sha512":"d0f743e05fda2357d9f483bcded594f262403ecb3594d41ead5e6e20b973bba9454ddeb3b81b9e5a854ccc2b5e63cb33706b72c2beb9fb6a5d1737e12d33b6cc","ssdeep":"384:8KUo1vN/G8CWUCjUNwM4ydtX27udLV0MK0nGH5RCEZYXi9SiN:vXvN/G8CWUCINwM4ydtX27udLqMK0net","tlshash":"2b52fa447193f899ab570ce1947f810db1346a48b54fc870b36c6c872a3924bb597f3d","first_seen":"2026-10-07T15:19:47.769295Z","last_seen":"2026-10-07T15:19:47.769295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/images/benefits/mohamad-ilham-fauzan-bSPh_zQbHkM-unsplash.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:13.127Z","timestamp":1791386353127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /images/benefits/mohamad-ilham-fauzan-bSPh_zQbHkM-unsplash.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Oct 2026 08:22:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60153-d4ea\"\r\nexpires: Fri, 06 Nov 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkrAj6%2FAKTuN%2B0kkO1IhkQcd5rHhoEQQx8db9yAJ5H2ra6mMWn5CloFhgbPxnOpXvxNbnc%2FahJjcaH3Yo9jwlBGX%2BJE4ePBjTK3dG34QPeOKx50VVs80yYrXlXuBxA%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de2030ef00b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54506,"size_decoded":54453,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3","md5":"99d0c346c20523cb8f6ee6fe76ab71a1","sha1":"62a9a24fea658813352acf298744cdd626b1371f","sha256":"06a459b7675e04e3c8a079532fdfeca81ff55d01410f043937dcc729391fbfcb","sha512":"5d0fd3b68ee118e4d5e5649b130dcf40a75bd78877c723e89c1832cd30d74d935cc05e71c5b85df245f85fb6b9342a7bdd7d4b7c0185c7ffd66dcb8f1b0278fa","ssdeep":"1536:hAjZwydMJnHvc0mJGJCtNsMoP0WcSJbwceEj:hny6TbCtN3Q0NEj","tlshash":"f533023c4f7a4327cb97633508dcae8ad7a4117f91e9a6d0e095be2539f42dc8c8b056","first_seen":"2026-02-19T04:44:57.767944Z","last_seen":"2026-10-07T15:19:47.774835Z","times_seen":23,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/video-preview.77e71c19.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.801Z","timestamp":1791386343801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/video-preview.77e71c19.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac6017d-27cb\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1l7fQgvwUvfPL6a67Ysk4lKpZ1o%2B2AXwPRKjflaofR%2FySR2WsqBsX95m1ICAhCOUOwjSBvGZngjcKxU5Uc9DAbjnl%2BLDapMj23rRNLzLj9FxiQAQrrw8ph5V1dbuqg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c8ca070b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10187,"size_decoded":4735,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10130)","md5":"d91a2b785fcd77369d2c362e92c08829","sha1":"a29412356abaa45869ea096359dc759252f8282c","sha256":"b68eddefc084010e8584d093935c6bda88c7a68c3d7fa59b5353c42544794372","sha512":"6aa198f35ead0370a1e093278206bb1e53b0439564f82b9dbc8333cf24953bb34dbf80d30514b100d55f0f8850ab0387a108451dcced449f545d8a6ffea20b23","ssdeep":"192:KhVeN2Qvcz9OnoxRRv/jLCqECUvifeicZM5hscuUqWtr0FljPhBAjqeYhPjOIaDw:eVQnoZv/C7CarZMYsqer0Fj3q1xs","tlshash":"6622098891933caa92bb49d5157b810a713e2da87d57cc54f3be2c4a27004d8b4dbfde","first_seen":"2026-10-07T15:19:47.777934Z","last_seen":"2026-10-07T15:19:47.777934Z","times_seen":1,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/184.c44e07e8.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.809Z","timestamp":1791386343809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/184.c44e07e8.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60171-2b96\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DB3skm3ZL%2BYDLT9jB%2FSw8sp0SNV8VDnwEHyGvWK5N1PnABMNI%2B5tJQuFVoiIL0ccpYmLXv1HUQiLJIndhvdSOAbae79bqZMo4Wpb64JOROMAlS9K9aVFbGlWvLwAQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c8da0c0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11158,"size_decoded":5348,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11111)","md5":"604778751cb87910193fcc91087e3c07","sha1":"737a0e225ad27402de0d0066e153282bc687d102","sha256":"197fb311315661138129461077eb1d266e289663f992b7030fb39ad408e347ce","sha512":"fc4bcf27a2be7e1edff3caf0507b12a8f9fcbda286b47bf71bf1f859fd17c6e9660c9469bf583b38d507bdee430e76af0d7ec3b38625799d03e3dbaba247c0da","ssdeep":"192:XGMG+HJg15hlpur+m9Tnx8E00U9IcHZSN2mGqRZAOpLFC5g5i3QzKclqim:XGX+HJg15/pI7rSE2H5SN22RpPiylqim","tlshash":"e732e895f31473bc59c203b0c6762141b65f259e31da91b8a2f1c9e0b2875dce1bb8ab","first_seen":"2026-02-19T04:44:57.794714Z","last_seen":"2026-10-07T15:19:47.780652Z","times_seen":23,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/images/benefits/getty-images-69jSANaMXlE-unsplash.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:13.129Z","timestamp":1791386353129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /images/benefits/getty-images-69jSANaMXlE-unsplash.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Oct 2026 08:22:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60151-c2c7\"\r\nexpires: Fri, 06 Nov 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrXf7UneRpBBiy70ZVZSasftbz6zSGutY8nBetpPA%2FN2M%2FwlUu%2FvyIBa8l9tR7ylBnpGT%2Fdqkc%2Bp0E%2Fg6kZmN8SdCJY0Qad42VNcBGFVzPqxFIHF%2FsUZ8Ef8Uk26dw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de2030ef10b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49863,"size_decoded":50070,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3","md5":"263a3b7571861f2ae48bdf512c68e8c9","sha1":"6819e4a0199456ee275eeb3e5ba5d9248abf461e","sha256":"18f2428d31aa6d9234367881c4c700096f376dfd9ceac941d5d519bcb55e2f8e","sha512":"ed4f80eadfa5c41f878b1ab493541e58973a7f0e2591dc245394a3527452f00a080be8fe4f40cd93070cac160c6a542b2c0da2f31adf262a2d5d1c0814b8270c","ssdeep":"1536:h/YLlcPfM7emcmt6SbqT8kS/4KxR11M0XD3GrF7daek:h/YL8M7e4tM8kS/4OR11MLk","tlshash":"7923f1363b2df377da34cb3c5a06738cf17101aaeaba0ab950255b1405544f6a32e2fd","first_seen":"2026-02-19T04:44:57.816029Z","last_seen":"2026-10-07T15:19:47.784465Z","times_seen":23,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/logosingwhite2.png","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.806Z","timestamp":1791386343806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /logosingwhite2.png HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Oct 2026 18:16:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e96c-16f73\"\r\nexpires: Thu, 05 Nov 2026 10:38:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103227\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vwq4FnEb5WZxUcalQI8bBrfoGpHKdmksCmKIDnJpBk2t0RfUYOU5uAp2YTx6L8jmye8u0%2FtRQgybqgd%2Fudd5oVbeG6s8TR88ju60prikLXNlwb4V9sWEElAolrseQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1c8ca0a0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94067,"size_decoded":93367,"mime_type":"image/png","magic":"PNG image data, 1462 x 517, 8-bit/color RGBA, non-interlaced","md5":"04f2d453ca05b43490e497b548ed00d3","sha1":"3f86d54c8ef035076b49b8cb8eecea1b49412ffd","sha256":"8163705a4d0163261a591a3a41d38c53aaefd478731b70950e7442ccadd43f0f","sha512":"f461322f5d8b6b442b16f1b3413642764c923396069a7c2cb0ba135de55e872e250f57b197048f7f8dec12744b16c051c8bf92e33f3abf238692d8889bced6f8","ssdeep":"1536:KdIIORt6vvb9v4LBPNlMhjnKqx4BFcxEx9hqf3uI4tOs69:KKPP6nBgLBPNlMpnKUwFGEx9hq9s69","tlshash":"c19312785806ce64d4b26e332d716e6b6f453c4a4ac1ff4281f67a5c4acc11bea3990b","first_seen":"2026-10-07T15:19:47.786432Z","last_seen":"2026-10-07T15:19:47.786432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/logo192.png","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.543Z","timestamp":1791386343543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Oct 2026 18:16:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e96b-14e3\"\r\nexpires: Thu, 05 Nov 2026 10:41:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103033\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUQ55D8h9dS4JRwlLQPbcmxWxhYwHihIet2pS0bnBNBORjvL3%2BjBnflvyGUjvuHuvmFO%2BhKS%2BCUUAt%2FhNDEBQDLIPjocRl6LBqWKzqLL7Ymm6MnDoJ%2F%2BjRZq16bSMA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: a46de1c729ef0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5347,"size_decoded":6139,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-10-13T15:44:06.231953Z","times_seen":15438,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/f4.svg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.755Z","timestamp":1791386343755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /f4.svg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 07 Oct 2026 08:21:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac6011c-329b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7o9ejT3Zd08hLJ5hKxsWrC1DIJU79FdVtRbuxlVQKh4LHVhYBTI7nIF50uV4QtSGNTlBsRrSmQhQZ1MYS7aLRYsS5aFADWrzVl312kah0G%2FR%2BfuXXzvG7Jv5G4N7w%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1c879fe0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12955,"size_decoded":5843,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49f2ba822c38198416ece6ff7029f322","sha1":"2c6d79bc7292347b963375c2b0633b1ba07391fc","sha256":"b82affff84599a0085bf78b687f166bbe616acb77a0e8be05e2b451b37d32f7d","sha512":"514ee5a7ca8f22e6b3bf0439b385e3bc1a7fffde88bbb72a592382c4e1db6c07c4ff7c5d34204700bf06a94cb0995c0ffa9142acc2adfcdb84dce83447cebd39","ssdeep":"192:aukGiUUTUXC8pH7xklBHRluMFX9TZ2ZrmNI1YOc5l+e7cyqWYRNZARceNdAXerI:x/fM8nQdJFNTZ2dmNV5lt4tWsQRcOzrI","tlshash":"1642d7f5ab7062e0e848e7a6b6254138795f78fb7fd5c288c355ad64bc521ad8c4ccc0","first_seen":"2025-07-14T01:40:28.338986Z","last_seen":"2026-10-07T15:19:47.791785Z","times_seen":51,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/css/benefits.e3124d61.chunk.css","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.814Z","timestamp":1791386343814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/css/benefits.e3124d61.chunk.css HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Oct 2026 08:23:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac6016f-19ca\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCRwDmWm5iDnuXK7RjM0yUk9p%2BZyx1n175tb0%2FrxQy5CHwsVscnLhujMfpSE3Tf2mPXoK9zT%2Bxk2DTrudDjulq5N0R2SA7TM%2Fr3SHZL7KZWr30Gv6IIWmOdDTzpfIQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a46de1c8da0e0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6602,"size_decoded":3683,"mime_type":"text/css","magic":"ASCII text, with very long lines (6547)","md5":"65a769fbcdd9468701a93f37352bcab3","sha1":"f09b4718020224af0adf867fe92ba1f31ec118dd","sha256":"b4b75c29748237f97cf95f7f31b5abde4caab1f38450ff1519d93722e06819ad","sha512":"953fc4d084b5469955c968b43fe21a003ae786a2a3e67861ea8d8f93e57616aafe567b36a977471fd16c04e58b654b968734b3c73705d1cff1d8eb0b873b0bc7","ssdeep":"96:fB5mSJ+MbpDAKneQYXIhJIZiS+KSme+je0CMWw89BfUOwImd4:nmUJbiKneohJI1+KSme+je0CpJD8z4","tlshash":"0cd1c730a3241c63a2234f384744f6f85ea450738ee38519e6456e3cdbfd8f4165e792","first_seen":"2026-02-19T04:44:57.807695Z","last_seen":"2026-10-07T15:19:47.7953Z","times_seen":25,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/main.c324c152.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.081Z","timestamp":1791386343081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/main.c324c152.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac6017c-9920c\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFq6GFO%2F%2Bst8hP5XHVytDRnqF%2FVe%2FY8UiQWQGoCDnTHTjJf9WEpT9ASE4BYOMAz%2FSpqwaGCsFmRBPPiyWFwTYhpRt%2B1HqAEs8LREHE5rn8Q07NF1OHc0dCEpp2laPg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c449a90b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627212,"size_decoded":185383,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"d67c98a8ff86e75eba402bafedb79c78","sha1":"b8c8f33ee7d734ffa35896e0e51bcbf130155d84","sha256":"950b156fa96cfe4abfcfce870ec9cdd66f6bf5e1e0c71ffa492327a605202593","sha512":"7c7b20f2425e04bdf56f4ee2640c4428a8d878de55ea378c72639f9804a4991c1af0a8f59c89e9c42f905c2ff227304dcce1d63efc1b5d9e46d8857e98a777ee","ssdeep":"6144:YMjNN2WEEwho1attIhH201NBfZ8Gk6QCOQwi10PUEAaBWoJNRNXj:YMjNhw/ufOO0PUtoJNfXj","tlshash":"ffd408c477b27559169a978280bfcd8d62352cc6240ec0347b3cabc9913864d7a6fbb7","first_seen":"2026-10-07T15:19:47.797029Z","last_seen":"2026-10-07T15:19:47.797029Z","times_seen":1,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/popup.67878afb.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.805Z","timestamp":1791386343805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/popup.67878afb.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 Oct 2026 08:23:25 GMT\r\npriority: u=3,i=?0\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"6ac6017d-2f4\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kL%2FnqSxyFqlFf9BAhg%2FaZUTwyRK%2BJpaaRHmnD8nBBvuqFoOIAH1d%2F3Q3zGr5LsMKswJl3LHGojHJs67b2ELJIhJ2n3ORXJDhpCDAAOAg8ohhOhKWKU6Jm7SjPHLsg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a46de1c8ca080b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":756,"size_decoded":1248,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (707)","md5":"2982f7266a0683b19566bd514adeb9c3","sha1":"70773c4e470596d6ca60925d6263754b163cd246","sha256":"82bd337db34f30ef8998804aeec3873f48af98fc7ef420374611f197e2a343fa","sha512":"72de6e1353190aa360547772027fabe89e3e3a1b910ac63a3a60fc384b20c0d359f53c66cc4b1c3373bef5d0ca71148dd5af45d772c228cda4f02ae6445b3b59","ssdeep":"","tlshash":"bd01fd48a1a0bde8a03f098ac2aed54d633ebec49a248cb4b56c78010b414bc5b07ba4","first_seen":"2026-02-19T04:44:57.795886Z","last_seen":"2026-10-07T15:19:47.799749Z","times_seen":23,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/cards/bg.png","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.825Z","timestamp":1791386343825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /cards/bg.png HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Oct 2026 18:16:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e975-140f20\"\r\nexpires: Thu, 05 Nov 2026 10:38:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103227\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZpVvROfjyFzW5Y6ANQrYru9kRVw7S%2BRGa28OGKQCmvRs8g0ONQ6xRUHcMRcibiEf5AOAucMNyGoAFQvRLYgxyrEO0r2eRHlhFfeAQ%2FPcEokhtBBXqh43oiRHJm5o6w%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1c8ea130b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1314592,"size_decoded":1315805,"mime_type":"image/png","magic":"PNG image data, 1497 x 975, 8-bit/color RGBA, non-interlaced","md5":"17bf2aa9309e516ada329307535b270c","sha1":"5eefed1c7370a5c72fb29fc60c41364eb4569d8f","sha256":"f955e551e0a16f445303257ab0dd4e7e6df6a47d0bb78deb21af78181428efcf","sha512":"431f6eb8157479a0ccf066e0c2d16e9a2da4020fd2c11b53fb249fbccc99394c5104aac192bb9cdcdfb2b9833e7cd8c0677ba80f2b69cc480c906d8c183cea18","ssdeep":"24576:UfAubnQ1SNevM9x07xr0Cwgk9RZ4rbCn/VegTkjRsls8:GETvMuxArgkabCn/VNWst","tlshash":"562533ea0f123f25ce6b5615780bb033f252e12ea56f55bb5004dba9f4012189fee397","first_seen":"2026-10-07T15:19:47.801879Z","last_seen":"2026-10-07T15:19:47.801879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/logosing.png","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.953Z","timestamp":1791386343953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /logosing.png HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Oct 2026 18:16:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e96b-9cf5\"\r\nexpires: Thu, 05 Nov 2026 10:38:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103227\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TkYTEp1a4dQn1fTTVviIazB8ibd9WFftirJzeGOYwCF2nqv7K2ukOryG29ISXSxx5trRUiVkCHDvCd57A7Kyrn3HVpzOrfsr9dbjGJwGtDCul%2FysN0nIwwqrJEBbig%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1c9ba230b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40181,"size_decoded":40898,"mime_type":"image/png","magic":"PNG image data, 414 x 626, 8-bit/color RGBA, non-interlaced","md5":"e9baee7e56affa9bf82d93d262d63860","sha1":"ae5540a0fb7edb04b8a8f444c28a2ef040f92847","sha256":"d6cc7fe6235114d93ad54019130299ff5be5b890d598a36b563847755d418849","sha512":"d6ca1496ceec8d43342c1af2d8b158ee986c4357d9a20d2dc628ea46f76a27448d609b8a6ad197650408d4b2bf27a926ea9f2f34b96fe801e6dc70bf8dbde904","ssdeep":"768:BtqF+oSPEqkwfFTrrPXx2OjhapwhbDXsaTjzWx+wciIGRwl/CefQsl:BNoQpFTXXopQX8aTu+wclGil/CefR","tlshash":"3203f1a5c8302db817537aba8d32f3d8d8b5371a3a01ad7c5101b355583bfe48a663b6","first_seen":"2026-10-07T15:19:47.804464Z","last_seen":"2026-10-07T15:19:47.804464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/722.94a5da76.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.582Z","timestamp":1791386343582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/722.94a5da76.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60178-96be\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTd815U%2FlldbVlnW5qBj3mLEHp5tbhPHCBkn85xa1J4KVCKD0VvQG6kGWhTtQwtQr11mVlnLRNiHeHtWVxwUkNMY34C84HH%2BKQhMf6ZwdShpqVvMKZBonHccnhcChw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c769f30b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38590,"size_decoded":15548,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38543)","md5":"9dd9163dcd8ca6bdbd9de192c270be30","sha1":"9677b93c8cb44ffd7459c815452450ef517f94f9","sha256":"c2b7960c906f797d54fb5f8b1e261cdf92ab447d5f7d15c759df824a1fd8191b","sha512":"91e5f0d532493473ba620bab6f325a48206d811a17b6707d933bba2d1546ac3e471f3ac1a128dfd1258614bcfed5e9a1da3bdb4fc5f9c6bf3f8e8b901306c41b","ssdeep":"768:0bsPlgqszZUYcO/+uPOwhNzx5VIvKiX05dJ8QJZgm7R2KBOaIJZAiFF87bauRIat:UdDfgbbAoeKoc4w2oc","tlshash":"300307c536d1b0a153aa64f5447f0507f33aa915780d84a4f128aceb6cb640ea7bbf7c","first_seen":"2026-10-07T15:19:47.806284Z","last_seen":"2026-10-07T15:19:47.806284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/257.c0a1749e.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.587Z","timestamp":1791386343587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/257.c0a1749e.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60172-638c\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGPlYpDUu%2BuVGgkr77YfQO7MfrO5w7hwvG6Sc0z4b4AQsEw3%2FE0FfzGEdXj2l8aCUobsKNRSyQkknJC3o7Pi0LEtQR9huA3a5KryAVDddTAv9eAMlfqewyOxcK8gMw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c769f60b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25484,"size_decoded":10207,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25437)","md5":"a66eb2aa3e1e9c000a5b6f5b9abeb2bf","sha1":"e3ac979d7bdf8b14ce6b32078d199b5ac9a6d6dc","sha256":"e5d95e287782e2e66099e7000150d0e154d9531ca1bff981d4a32e0dd17f8890","sha512":"6ac0055e729df299f65e1953109c86b68011d070f4887ceb22fedcd521953afa4dbcbc9f2d2090bf806b27c58c0852e05b0e5af50b7ae16d5830958a1cf05698","ssdeep":"768:Hq5A4hUlT8eQVXRSPecTp+onzaG3jC1Xue0Kcz3B8a0D8NaZGNwcONY/dVSya3Ln:BRQZF6aVY+Zn","tlshash":"9db209d893546af97501dfecde075818392e25b5af83c5a4d3989c2aa0100d8af4efd7","first_seen":"2026-10-07T15:19:47.807826Z","last_seen":"2026-10-07T15:19:47.807826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/benefits.663c628f.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.815Z","timestamp":1791386343815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/benefits.663c628f.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac6017b-21b4\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTHP2qa9oZ6H%2BkzD3C8MjvpHFEea3QA9EetUajMA6%2Bx0jrSCgGBzGu1pKLPPzfD5AGB7o5JZAvj1XWTxxfYWMUgWXAPgF3pM1tcxmFFbs3U%2FMmX8EKoq9DGQ8780Ig%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c8da0f0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8628,"size_decoded":4505,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8576)","md5":"173876376dbd8173b384ad7ae619a670","sha1":"f006694c89ce18eab65f7da05c47ad86639f2ed8","sha256":"5f3c2f54bf04ebe65edf6fc8207c37cce56d19d107ccdddb3a0ed0c690adaaa1","sha512":"cd5843740128490e92c3bcc34191cbed2484ec7236cb558c79b457ce1120a5ac5ea0846cf526159172977de82462be8901999c61289ef4691ce4345aacc0cb35","ssdeep":"192:2ScP9sC36X2FRG6nAoaBl6R9BzOkNuRjcEDi7Qv:2ScPyC36XsTM36R9BakNLju","tlshash":"f602e64c82603eaf7f2105516d8fe288d25d8e44fb8ac078bf7c340d16d52966637be9","first_seen":"2026-10-07T15:19:47.809737Z","last_seen":"2026-10-07T15:19:47.809737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/testimonials.465fc79b.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.817Z","timestamp":1791386343817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/testimonials.465fc79b.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac6017d-c67\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGzvF5bneKSuk1MZKtUGRYGPpQQjrubyTA313qEK3sY9DvMTmeKJfrOaLA5oNWu1d44UsSRlIGAnkcD%2B2fYZp1N9j9O4ztuVC40nnTuUrpUMvykmjXMkzjIGYO0%2FOA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c8ea110b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3175,"size_decoded":2360,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3119)","md5":"a24c6874ad5d9593d807dcbdbe039f25","sha1":"4c76e397b2239def264ffbb1ec5d13ffde330c3e","sha256":"1dd3fe54b658c414e948723e829a28bc23bcd31a7f580c30a26a104a76e15f59","sha512":"3ff3f32f46048dbd6131f1c3b8df1ea1e52d45a272afcdc5c2228eacc18e60a022cf8ba5dbe473357aa4d03bbb6215b4ba96db712a886c970e42b32afc961c56","ssdeep":"","tlshash":"6a61b383c1b03ffcb56b16a19e4f808db21a1f14d50d88a4b5f538182659cbc6a62bf8","first_seen":"2026-10-07T15:19:47.811431Z","last_seen":"2026-10-07T15:19:47.811431Z","times_seen":1,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/getty-images-my1wo8txDPU-unsplash.webp","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:05.013Z","timestamp":1791386345013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /getty-images-my1wo8txDPU-unsplash.webp HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 07 Oct 2026 08:21:51 GMT\r\netag: \"6ac6011f-be7dc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b23IHBwrhOwZppskcgZFGt%2Blm%2FwneoF8ePrh2oGj274nB%2F%2FarBOgebPdWXh5dD1%2FzvsphOo9%2BCyRCqZwyX9Rxj7nIws7V6LJln8upom8t%2FRMcmxkVJ4DwgXXWR5Mvw%3D%3D\"}]}\r\ncf-ray: a46de1d05ab10b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 780252\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780252,"size_decoded":780998,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"658d249ee2daa75004975d9ddbf4114f","sha1":"113779a460e18b2fdfe236eb5f7a408118d41638","sha256":"cc1dd161d66727dcdf470924814949dcc12f529518e5b2c09a0859332bd4c74b","sha512":"a82d5940c389bcc920746e1e4be14b9db3f3c00bf5289f57c087495886c8e12a106fac22f7777fd88177c41683826e144a592fac9cda6baef53931cf41681012","ssdeep":"12288:Jmpbfq94pUf3kUNQCPywbYJufRiUxssm4fweqGqdwD9gcH0NDH+h476blQ+:y7C4pUfRNhTbYJukgssuxldwDWj+h4m5","tlshash":"56f4334e9ff81b18daffbbfef29a3ae8a123b356574824d5101142c634d9c505bd01ea","first_seen":"2026-02-19T04:44:57.758259Z","last_seen":"2026-10-07T15:19:47.812776Z","times_seen":25,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/faq.980a6338.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.821Z","timestamp":1791386343821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/faq.980a6338.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac6017c-135d\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owXL7Cp817l%2BRluvNKIsoSgqu8Ihy3WS7befMp7FXO6%2B2SqHuX3Zv8d35izAA4e1bevisuTUq0Vt7b70OTmaxsuF6Fj4maZsEU%2F%2BdmY0YK45%2FTFJ2vhgHOeFkHPpCA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c8fa140b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4957,"size_decoded":3140,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4910)","md5":"91262b5cf9db23487f617c3c8d69b9e3","sha1":"9e4994492096708cdff437f1968be0c1f7ebb1ba","sha256":"5afafc4a99a5386e51af586fd3d83ab2b7df9dc32e9df3813d4e768efe05b6b3","sha512":"9f7e5797931d640b641cef5f78fe8b2f2df65e193ffa7bcd919543fbbcb651237bc2a9457042b5e722c10810f94fca5722b906f8853437c31bcbb26a6146fca2","ssdeep":"96:bFSW5BJq8lBs1Yhl4u/U6OScr34EzTJAkzlg3DFLO9Q7xpdvKV:UW5BVlBOYfzOScrFzdAIuJ/ZO","tlshash":"12a1e84ee4d12fb8382302896e8f550d792d6f28d71f0ce076a9108a02546ee3663bcd","first_seen":"2026-02-19T04:44:57.798311Z","last_seen":"2026-10-07T15:19:47.814034Z","times_seen":20,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/images/benefits/getty-images-t_jCuKaIrk0-unsplash.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:04.186Z","timestamp":1791386344186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /images/benefits/getty-images-t_jCuKaIrk0-unsplash.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 Oct 2026 18:17:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e9af-174c6\"\r\nexpires: Thu, 05 Nov 2026 10:38:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103225\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14xDYv1Td7KaMvCrNVXrUY1MaW67Ubh%2B%2B%2B4kcDKyHdf3hh412QVRkJ46NAaCNL43QCNZP4%2BmgH%2BZfDX3LpiXIMpEurD2sd%2BWGPVGdpuM5ot3o30iEgeuneABGg7IYg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1cb2a340b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95430,"size_decoded":95481,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x960, components 3","md5":"da86c1aecfa6528742095be4ccea2e29","sha1":"99fed3ba0aa007a6a6ed4a133e3082e19ca63509","sha256":"48f28b420a7075b5478993c5bd5d710a549c874a540bc4627744f6c40030ffa3","sha512":"f934890a4c9d9b718e74a6a1e1df5cb55542f10713a438b93691dbdb0210963fc16eb112ed8ef11922514a0c5512b98404ccd77d11bcdce79d95be35efde8eb6","ssdeep":"1536:h6SbzYLNwSMdxzL1b9v8ZHwuxbe20E7ZURKZdCjC0vnzLT9mjvyqagL73Q:h5PYLPMdxV9EDUwZUPvnzf6/Xg","tlshash":"c39302744663a8b5c552ad7c0c414fc3f496367cede26aba04a01fa293839d31e9d8fd","first_seen":"2026-02-19T04:44:57.792698Z","last_seen":"2026-10-07T15:19:47.816029Z","times_seen":25,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/getty-images-cgCdRyNmz28-unsplash.webp","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:05.015Z","timestamp":1791386345015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /getty-images-cgCdRyNmz28-unsplash.webp HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 07 Oct 2026 08:21:50 GMT\r\netag: \"6ac6011e-88f2e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dd4Qxuz5nARHyAr6fT7F5EbfYzSDak7As93hRMrltQmGKHbv2yOwLUHxSJC1191mIwXJLk7pNqc2W1A5tFlOMmZ0JIpdV9g8tYEsC0zMsDgjKJF5onhSPzHut2NB%2FA%3D%3D\"}]}\r\ncf-ray: a46de1d05ab20b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 560942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":560942,"size_decoded":561676,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58a965cb26ac983e7751b75090d3943c","sha1":"e1f2d719ebc44b830141d210b52c3b0c30de622d","sha256":"abf15cb426904a449c4629b58ed6c86227ad1b91741cfabee41130b343e7e8bf","sha512":"c82c229161ad8f30e05e3e8ff89b30960d957cdb2e59fe73e4e544a53948710aafa987c80fc296410e23353d99127747fd0052ea2865a0ef4c99b592b4f95393","ssdeep":"12288:6G+bst+qQbMl0FFwxEqGP0IZgzVG5F09vxr6EHnh+yMqIn9K:6zI+pM0qEqG87MF09vYM01qI9K","tlshash":"94c423b7a7ef53ece8f12176391b775d609aa340c0a0de435dcdd607c57a0a8838c9a6","first_seen":"2026-02-19T04:44:57.77985Z","last_seen":"2026-10-07T15:19:47.817988Z","times_seen":25,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/getty-images-hlHqM4hsInI-unsplash.webp","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:05.016Z","timestamp":1791386345016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /getty-images-hlHqM4hsInI-unsplash.webp HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 07 Oct 2026 08:21:50 GMT\r\netag: \"6ac6011e-4ce3e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mw28c3HOTTcX6Z2NLSsPcDqS2LsEZxdMmH5lBE9wRuro0lC1b%2FVUBIRPeTFEvYmkdXQJHT9gOfzAyhdX%2BHlsJcJV22K1Y%2BsXMU6MUdfrK6q%2F5Z4DenGxq%2BAsGgNSlQ%3D%3D\"}]}\r\ncf-ray: a46de1d05ab30b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 314942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":314942,"size_decoded":315684,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93c54c0daffe57dc8caa592ebcb327a7","sha1":"2c01889912c626014053f8a3e8655cae4f0721d9","sha256":"727a6ffefa46b153c4b933ed8d613a9f87024ace0a49104abb4c7b43e458223a","sha512":"f7170f9e73a2ec4f03a3820d15085c5f57299e5c92bf16d76e6d67d218e2ed875781dcd22ccd8aa93f5ca84be984da851760271b83a3375a51752b51f445fc93","ssdeep":"6144:TFCO13fLItJNGMAMD3m4XU0lTeFcPw98trSg6+MCKbIZEBJvocr:QQvZMAw2QZeKw989o+tiJo8","tlshash":"2864235ffab46101c9e2a97b31429c5e4591aa7df910c4722ff81837907728d1ba8fe3","first_seen":"2026-02-19T04:44:57.814828Z","last_seen":"2026-10-07T15:19:47.819749Z","times_seen":25,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/200.ae0003d6.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.819Z","timestamp":1791386343819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/200.ae0003d6.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60171-cc2\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNGqxmHo4Q%2Fv0R5kn2vMKJRMpTlrai5iNPlGBQ%2Bu8flCnTqdFUMEn68rEe48dhYLde52GxOpz1PvSDlu6E%2BNk%2FKskwMk7iB3QgbrVJpV6pXCFdVAns3ZeFD%2FBI2MhA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c8ea120b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3266,"size_decoded":2171,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3219)","md5":"1f42332d3321bd88eec9f9a8975bfa44","sha1":"9f48b0e25b0847a40ee5032ebcadf457f684edb8","sha256":"f99ccd22fb419326e25c69e331a310458cdcda2c6fc648596f39bc6bf6445a66","sha512":"f671299c8563021458b2b6ffb87d4181481f7bd0797f5b179207e4b3c98510dde37ce6ba8f08f27581e25f8bd0789b67b21a4627f104f53f3bde0c09f53d6e4e","ssdeep":"","tlshash":"8d616380b295b9b861c381e890bf7607f139351b307ef094d7a2c5f0b4b449a6536ebb","first_seen":"2026-02-19T04:44:57.809306Z","last_seen":"2026-10-07T15:19:47.823052Z","times_seen":23,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/css/main.fff043f5.css","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.083Z","timestamp":1791386343083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/css/main.fff043f5.css HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 07 Oct 2026 08:23:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac6016f-10040\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ti5PQVU4FUN7A7%2BH0aHI9%2Fsc9bkvrV8vGmuni7yl%2F6expVrYXHsUNYB11yW1kC1uohuf%2BXI1n6GSRdsts326y%2BwIxWEnfbGaAl2MDUt8Eal%2BddOBSmBFs9GJ%2BBZZ4A%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a46de1c449aa0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65600,"size_decoded":12807,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"ee78da144e578a0bc6428b526755e605","sha1":"61070f8dc9f6a09e2d7c77293748e464680fcdf2","sha256":"5e1491c345472ea86301485b1b5483ed7f7bf2509899bd1cb9ecc49b5a027b0c","sha512":"2db269ecefe112d9f3787cc9ad6183047442a735eef604cfae259152bf9eab9ec7d85ee76a56d41c4d8e277f2240e7ce8b1a297c3a42ccab97179c04d3e9cae8","ssdeep":"768:aFhuVM+pjClW6tKaNJEnXNN01MwhwFC79rO:aFhuV5pjyW6tKak7C7k","tlshash":"ad53945d96a1183b7c13a4f6d2dcfa5cd01ab0c5de7b16dabd86110897e23f70ea3a04","first_seen":"2026-10-07T15:19:47.825444Z","last_seen":"2026-10-07T15:19:47.825444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/favicon.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.545Z","timestamp":1791386343545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /favicon.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 Oct 2026 18:16:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e963-9cf5\"\r\nexpires: Thu, 05 Nov 2026 10:38:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103229\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PzSuTNHhkpvUMlYv141YaEL4uevS6V6Z8pbyDKbyXk3zXz9YJGRSZX96F8VfO0PxBj5h4vJC3kZimKklfTy5AcuZBkx98pKBGM%2FYS%2BgVYppv6vngV9t0ViMmBhAJig%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: a46de1c729f00b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40181,"size_decoded":40904,"mime_type":"image/jpeg","magic":"PNG image data, 414 x 626, 8-bit/color RGBA, non-interlaced","md5":"e9baee7e56affa9bf82d93d262d63860","sha1":"ae5540a0fb7edb04b8a8f444c28a2ef040f92847","sha256":"d6cc7fe6235114d93ad54019130299ff5be5b890d598a36b563847755d418849","sha512":"d6ca1496ceec8d43342c1af2d8b158ee986c4357d9a20d2dc628ea46f76a27448d609b8a6ad197650408d4b2bf27a926ea9f2f34b96fe801e6dc70bf8dbde904","ssdeep":"768:BtqF+oSPEqkwfFTrrPXx2OjhapwhbDXsaTjzWx+wciIGRwl/CefQsl:BNoQpFTXXopQX8aTu+wclGil/CefR","tlshash":"3203f1a5c8302db817537aba8d32f3d8d8b5371a3a01ad7c5101b355583bfe48a663b6","first_seen":"2026-10-07T15:19:47.804464Z","last_seen":"2026-10-07T15:19:47.804464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/782.da77e714.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.584Z","timestamp":1791386343584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/782.da77e714.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60179-5a9f\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55P7CEWIYVLR1K%2F5OLSiUPJfR1mkYGU63a9jtSVNobXwrqg0MeSqkkebYb%2BUhhzdLs773WhMQ3G2JwAp5TK7%2BnDIAH2YYDBxERvnAgdvRq0hk8dF9N77rSOQ7KwP%2Bg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c769f40b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23199,"size_decoded":9209,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23152)","md5":"aab2f9bba8f85db2298f09219859bda4","sha1":"2b605722f51ba5fa7be90e3ca4066eb8119dfdf4","sha256":"aee321ff6191648bef180374403e1cc5290a881bd9a6fd8597893affc6c3315a","sha512":"4a24e5d337dcac0b643168ab0a78e96e41e7023b2e472f176f0aaa9c2d72fbe8702689248e70cbfc0dcf3003382eb047d755c3ae899e8ae9fba90fd3762d382b","ssdeep":"384:6B+8H32zoxeVQpnaN9GcGE4BpFDnm8z4iuo4Cm16aOTsPzlA0bQXPrIMY:6M8H32Y3TEQnPzrXPrIMY","tlshash":"d4a208d8b65071978bb7127284df4206f275676a188f9524b13ae0d82cb881d537ff3d","first_seen":"2026-02-19T04:44:57.784316Z","last_seen":"2026-10-07T15:19:47.828411Z","times_seen":23,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/312.a99011bf.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.589Z","timestamp":1791386343589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/312.a99011bf.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60175-7a14\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtFzawkTAeyE1Zc1OLpBV8Ys6CCPNN9xkzDomzkXXwQT8V%2BGvmCMOtxlxhESzFFJMO49xBXk%2BRSyOPEI0Jau2UfUogu2JGeoqA4f7NDHu2nByHsBJdv1UAJ3dxZGRg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c779f70b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31252,"size_decoded":9263,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31205)","md5":"f66dcec44de350b123cd02da03d243c7","sha1":"22938f99469149cc7396097a812b5a9e8b45154c","sha256":"3f70647f0a8751d3c599ec27c7b18be71d9b7ed8466a6eaeb1452d76cdd1356d","sha512":"4a5a3b29436ebb2c0461cc1e6c1d27688933dca7d031335bf95eb5f77288bc5e0ee855958a9c63a070c406a2f78b0632942f5367f500a53a296042837166c1be","ssdeep":"768:kiNYBQMURuqN9jMUUKZN1tOhfgsjKgpWAmfc:53NaKgpuc","tlshash":"18e2005b872e5faeb51ffcc2da5f8b0ce26d2f05ba99d874ecdc59510090042b672358","first_seen":"2026-10-07T15:19:47.831163Z","last_seen":"2026-10-07T15:19:47.831163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/images/benefits/getty-images-3JsSaNIP55Y-unsplash.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:04.188Z","timestamp":1791386344188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /images/benefits/getty-images-3JsSaNIP55Y-unsplash.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 Oct 2026 18:17:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e9ae-12fe6\"\r\nexpires: Thu, 05 Nov 2026 10:38:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103225\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgzbWvQHVO0EE0zMlFnlQdYJXCX9bSextr%2FMyNSd30gkoCDjVxalGXGnvTzWnLZHfI6Vp%2FZi%2BzIkvzc9U%2F54iENiaJKQsXA9ILGQKc5vrsuXq6dBtM66VQUXOina0w%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1cb2a350b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77798,"size_decoded":77993,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x506, components 3","md5":"3c3398d6c68f61d3ed9ffd54ee3f3dfc","sha1":"1fbc54423f80e52da7f49047ef0834b757b680f7","sha256":"f6dfa02687a6b77898bd9db0d2e66e37d87c8f0c1f9013b46ebd634d06ea1c55","sha512":"e09417cb0a084143a0bf1077349a9278fe18859ea4d18b292f749d2850520f272e9d2aa6fd0cd6424dd90c6dc46ebe3e82b3b66764679977b576e2aca076dd28","ssdeep":"1536:hpjhvgcaOUlEagYpGYRH3Ts1x5OaY6LVYT6nbmt1Fhydu1HTZ:hpjhbaxngYpGYVTcWiVYU6thydu1HTZ","tlshash":"af73022671a3a1f8d3f640317eb06b94796c48f0519a934725fdb0eb95d8ffca6a8024","first_seen":"2026-02-19T04:44:57.776857Z","last_seen":"2026-10-07T15:19:47.834386Z","times_seen":25,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/images/benefits/andrej-lisakov-_GNNUBlPsjU-unsplash.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:04.190Z","timestamp":1791386344190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /images/benefits/andrej-lisakov-_GNNUBlPsjU-unsplash.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 Oct 2026 18:17:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e9ae-10fcb\"\r\nexpires: Thu, 05 Nov 2026 10:38:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103225\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0WX%2B4na1egta8gaZaZ%2Fir%2FlidFSiVOkX2Me6ICW5Aq73rvYQ0pzyOW%2B1CNg8pweq4trrnfAhL6F17u6M9%2FNF0qRToynWhMlDGyQewxBm6i61CsKbG%2FFeq6cJ0ieaw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1cb3a360b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69579,"size_decoded":69810,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3","md5":"c2b3ef8803a0e9a819bd2724853c2315","sha1":"9cd61e353cb968783f017073e565d79729fb7e81","sha256":"38e53651a9459d3875db81ea69fc968adb6ee2d2dae2d1928f9fbadde654dcb6","sha512":"16cef6e15a802dbcff48bbeb27bc1fd4de893d3f5d4353a820b375f7730eeef72f8cc961e3b784086de46683ef646d1826aee51f15add2f483939b3b8622e43e","ssdeep":"1536:h7d18xBhFjA5WmBhgY8AXlwmw/zHAKJPDPNR2LxK:h7XShF0wmnX8A1dAzHAU+Y","tlshash":"13630295aa544ee7c45499b128fa373dd7ec152cbbc8b813a9e0bfacc53140872dc687","first_seen":"2026-02-19T04:44:57.791238Z","last_seen":"2026-10-07T15:19:47.836801Z","times_seen":25,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T15:19:02.529Z","timestamp":1791386342529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:02 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 07 Oct 2026 08:21:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eeP6DLdB9Fm9Ix%2BeBkuYyLkiYgd5C4Crc%2FhcIvblP6%2BKXkfpDvC9nxiuo9CzLYDdfLntmBUjCf4oErxLNptzHXFwHXj3C6OTx5gAw31XMyPTVPNotg6kkc05MFSXjw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a46de1c179450b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1916,"size_decoded":1556,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1525), with no line terminators","md5":"bdef1cd4df84dc9c79a59959e0c01605","sha1":"a2703d839c327ff1244dc118a1d07974dc3d56b6","sha256":"e96e4b08f99a9986ab96af0d38da53455b7e5532156902c25d32a39be823178c","sha512":"fe618b55c95ee7d07b275ef3a00a4ec8bb3088c7156ecf3741e435200f8785fe892cde3f8dc13a3788dd2d74299ab9607399aab9a14dbadb512b578309ecf85b","ssdeep":"","tlshash":"6441abd38e148839a3319b37c5a3306ccab4bc32d529fc653897174b84c9a63d29f936","first_seen":"2026-10-07T15:19:47.839484Z","last_seen":"2026-10-07T15:19:47.839484Z","times_seen":1,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":80,"connect":24,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/67.1aee5820.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.597Z","timestamp":1791386343597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/67.1aee5820.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60178-809\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWgejMUCCM232VDuWUZVDwdov5Y6hPDqud%2FPmqSVutldZY7RB6qEKt3c%2F5ZzhzheT7eLD9D7vMYNCpOr1kvG32eytH9q9U%2BNiuOB4%2Fr7m%2Fw9cAsF4JktZUGRIlyNNA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c779f80b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2057,"size_decoded":1587,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2011)","md5":"2462031ba811fd6d6d05cce44b9fd595","sha1":"708f0a8674f147667004a965fc367c7a486491f4","sha256":"027c9cb485720bcca2392d38cb6c020da24200877e26e3e1109909fbee563f50","sha512":"89c51e2401ba207c74f17e795009e25189914131e2132fdea56c87f5ff53c5e87f5d4171f2c85a10b53386abfef3046a596d1d262fd6009a8d4087b7729f931c","ssdeep":"","tlshash":"b141e6c9ebe5aaecbc290dd6a41da41c761b6f9ec73a49f4b8b42c0005050e47a17bdd","first_seen":"2026-10-07T15:19:47.841266Z","last_seen":"2026-10-07T15:19:47.841266Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/js/235.1a9a842d.chunk.js","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:03.811Z","timestamp":1791386343811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/js/235.1a9a842d.chunk.js HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 08:23:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac60172-154f8\"\r\nexpires: Thu, 08 Oct 2026 03:19:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1wYDDZ6K2tcdP%2ByhAMhwZQ8gcqPl7KLq6%2Fe%2BoE3G7yo%2BFgSWVb2sDE88dxEtPxEn%2Bm5S8hTEYJP1k%2FnX6kf4dDdUa%2BEy55ThTMekqE6c8GSWWC4tF10pd1NaKswYw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a46de1c8da0d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87288,"size_decoded":26805,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7b321b34a3063f8912eb7705057e1c76","sha1":"1ad3bebfabd32558deaa33ab77e6822c40845fef","sha256":"9961ce1ace21bbca9efdc54a3641236385ebbade26227172ecf21eb4b5eeab38","sha512":"3426ad1cf2158bd329c680b9a07f853bdac0766b03c149f144b69efea010b9d0fccd12ccefdb5b0fb9b44cb1d0e8318517e267ab6bebef920825f668dd942a05","ssdeep":"1536:BzfGIoKMmSmVy4JQeD9BlxvHk7+NEosXiA6wPXNHAgdmpIW9kjZC:BHMuR0CSXmn","tlshash":"5d831989a130b57692e715cb83a5c111b3b24905b949c4e4b1bd8cbb987dd9803feefc","first_seen":"2026-02-19T04:44:57.762451Z","last_seen":"2026-10-07T15:19:47.84442Z","times_seen":23,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/images/benefits/getty-images-t_jCuKaIrk0-unsplash.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:04.116Z","timestamp":1791386344116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /images/benefits/getty-images-t_jCuKaIrk0-unsplash.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 Oct 2026 18:17:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e9af-174c6\"\r\nexpires: Thu, 05 Nov 2026 10:38:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103225\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1nXIGwRsagPcxl29bgzi5j2xxv709c0cfp3dojWSKM6p7yOJFXEhfOHyaUcJy4lyaoo2pEK3C30EvlFerb93PlaQysNDgQpEZkGZFkOTrT3ZW6uyO1wrfuehYn9NRg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1caba2d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95430,"size_decoded":95469,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x960, components 3","md5":"da86c1aecfa6528742095be4ccea2e29","sha1":"99fed3ba0aa007a6a6ed4a133e3082e19ca63509","sha256":"48f28b420a7075b5478993c5bd5d710a549c874a540bc4627744f6c40030ffa3","sha512":"f934890a4c9d9b718e74a6a1e1df5cb55542f10713a438b93691dbdb0210963fc16eb112ed8ef11922514a0c5512b98404ccd77d11bcdce79d95be35efde8eb6","ssdeep":"1536:h6SbzYLNwSMdxzL1b9v8ZHwuxbe20E7ZURKZdCjC0vnzLT9mjvyqagL73Q:h5PYLPMdxV9EDUwZUPvnzf6/Xg","tlshash":"c39302744663a8b5c552ad7c0c414fc3f496367cede26aba04a01fa293839d31e9d8fd","first_seen":"2026-02-19T04:44:57.792698Z","last_seen":"2026-10-07T15:19:47.816029Z","times_seen":25,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/images/benefits/getty-images-3JsSaNIP55Y-unsplash.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:04.118Z","timestamp":1791386344118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /images/benefits/getty-images-3JsSaNIP55Y-unsplash.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 Oct 2026 18:17:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e9ae-12fe6\"\r\nexpires: Thu, 05 Nov 2026 10:38:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103225\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDQReDpzi7D%2BMUh4QOW2nVaoBV9ATsktEJwlEKUS9mAMTVIrwYHaTYySzPDB8uMLbMYBz8A0K%2FkJyIu2C3%2B3TD34%2BAPu%2BiKdOkygsK3N3b5NlpgqhMfyFtnsqc9VtQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1caba2f0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77798,"size_decoded":77995,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x506, components 3","md5":"3c3398d6c68f61d3ed9ffd54ee3f3dfc","sha1":"1fbc54423f80e52da7f49047ef0834b757b680f7","sha256":"f6dfa02687a6b77898bd9db0d2e66e37d87c8f0c1f9013b46ebd634d06ea1c55","sha512":"e09417cb0a084143a0bf1077349a9278fe18859ea4d18b292f749d2850520f272e9d2aa6fd0cd6424dd90c6dc46ebe3e82b3b66764679977b576e2aca076dd28","ssdeep":"1536:hpjhvgcaOUlEagYpGYRH3Ts1x5OaY6LVYT6nbmt1Fhydu1HTZ:hpjhbaxngYpGYVTcWiVYU6thydu1HTZ","tlshash":"af73022671a3a1f8d3f640317eb06b94796c48f0519a934725fdb0eb95d8ffca6a8024","first_seen":"2026-02-19T04:44:57.776857Z","last_seen":"2026-10-07T15:19:47.834386Z","times_seen":25,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/images/benefits/andrej-lisakov-_GNNUBlPsjU-unsplash.jpg","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:04.120Z","timestamp":1791386344120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /images/benefits/andrej-lisakov-_GNNUBlPsjU-unsplash.jpg HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/sa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 Oct 2026 18:17:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac3e9ae-10fcb\"\r\nexpires: Thu, 05 Nov 2026 10:38:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 103225\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eu5QTNpOrcx0XZpwhdIxNIBeOag2NT0aGfcccUZbk8x4EBTPACQUVHCLFFokH%2Fqpai9Ps1haNxg6PsuDx%2Fg7e5kfSIeuRxqLUKpS1ZnTOh5GD6SQ47iVAsVMHSIiCw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a46de1caca300b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69579,"size_decoded":69802,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3","md5":"c2b3ef8803a0e9a819bd2724853c2315","sha1":"9cd61e353cb968783f017073e565d79729fb7e81","sha256":"38e53651a9459d3875db81ea69fc968adb6ee2d2dae2d1928f9fbadde654dcb6","sha512":"16cef6e15a802dbcff48bbeb27bc1fd4de893d3f5d4353a820b375f7730eeef72f8cc961e3b784086de46683ef646d1826aee51f15add2f483939b3b8622e43e","ssdeep":"1536:h7d18xBhFjA5WmBhgY8AXlwmw/zHAKJPDPNR2LxK:h7XShF0wmnX8A1dAzHAU+Y","tlshash":"13630295aa544ee7c45499b128fa373dd7ec152cbbc8b813a9e0bfacc53140872dc687","first_seen":"2026-02-19T04:44:57.791238Z","last_seen":"2026-10-07T15:19:47.836801Z","times_seen":25,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rdhair.live/static/media/good.2d3d80805a94acef66b0.woff2","fqdn":"rdhair.live","domain":"rdhair.live","tld":"live"},"ip":{"addr":"172.67.135.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rdhair.live/","date":"2026-10-07T15:19:04.177Z","timestamp":1791386344177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rdhair.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 05:19:59 GMT","end":"Mon, 28 Dec 2026 05:19:58 GMT"},"fingerprint":{"sha1":"67:9B:50:C5:9A:C7:6B:8D:93:DC:DE:DC:1B:33:51:FB:4A:B7:DE:01","sha256":"5E:F0:24:9D:39:82:59:95:48:61:83:D9:83:1F:D3:51:13:DF:D7:B1:77:85:DC:F8:35:DD:6E:AE:07:C9:9D:FE"}}},"request":{"raw":"GET /static/media/good.2d3d80805a94acef66b0.woff2 HTTP/1.1\r\nHost: rdhair.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rdhair.live/static/css/main.fff043f5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 15:19:04 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 07 Oct 2026 08:23:27 GMT\r\netag: \"6ac6017f-a870\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rW61CLfx%2FNRyyuzBMsNeQ1TW7Okkjs%2F6k4Y4WcjFObqYHzb0tOpG4MZ9lYMD%2FSMzgQI4YUIrnJjFINzPi1tMq684B%2BnLejkTEPSF1PvM70IiIwnEknojKS7i%2BsFWIQ%3D%3D\"}]}\r\ncf-ray: a46de1cb1a330b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43120,"size_decoded":43860,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43120, version 1.0","md5":"5032e93bbe3d120bece5d4d3309d3b8b","sha1":"15853fbdbf4948541a3356d9f874628d127f805c","sha256":"10f1a0ef3f3497901c1c3e9987d0cb97d092a6ce1ff45669a1aed503cf67e6ef","sha512":"daed69c64a41bacb33d23615156b57f994791b007d5b2e2a7a61abc1bf9f24b12e07c96fe82ceb9ebb680436c68b37e59883bbcb4ce3205362c134af590d9c6a","ssdeep":"768:83gClYq8YvIm/HUlL2QIwph9odr06lstg3u7uWqrGcL4MnOdV/F:O5b7MlL209od4qsm3uqWXcadVd","tlshash":"d513f259d60ca8c9f380fdaccd0717935e1ff5c3c9361122db59586c2b6932079ae9c9","first_seen":"2025-06-01T09:45:38.770498Z","last_seen":"2026-10-13T17:06:01.208841Z","times_seen":3078,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}