{"report_id":"310dd9e2-1776-4aca-bd9e-bc60766e039b","version":6,"status":"done","tags":[],"date":"2026-03-02T21:11:44Z","url":{"schema":"http","addr":"area.promoriongroup.org","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"172.67.218.46","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"area.promoriongroup.org/auth/login","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"title":"Login","dom":{"size":478410,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24965)","md5":"ed20aad26823dd77a30c383a3f176b11","sha1":"3c7f2372586840b44bdf450ab2b9c1dfb31b7023","sha256":"38bfbb845e50e0994ea1915ebd2f267dce0da7c9800d2ef6f73e803cb957e779","sha512":"ac879e22b2677c8ffea689459520f43bad0a599289ae5798ec295e6d33ada0835b36a5c75242f890bd1d5964f3ad604ec288f636d3a681d4ee691da35126de9a","ssdeep":"12288:N+0+VJHNDZcfQbUvuBjaoP6mQPLWk8dm4:Nn+VJtD2fQbUWBj7PDQpg","tlshash":"e9a4beb1c100722abd128bf616e89b24dec45df7de0163a4f6a10e5e86cfcbb125d721","dom_hash":"domhash7cdeceb8c29c2ac5dba53b6bac6d8449","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"area.promoriongroup.org","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"172.67.218.46","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T21:11:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"area.promoriongroup.org","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-31","domain_rank":0,"first_seen":"2026-03-02T21:11:46.7536Z","last_seen":"2026-03-02T21:11:46.7536Z","alert_count":0,"request_count":68,"received_data":3405178,"sent_data":31032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":3,"received_data":1018501,"sent_data":1756,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":1,"received_data":338096,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-WRWXI3SN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"58cdd57011a194468f709cfcfc27c9af","sha1":"5e1b03fd5ee29636f702a29b3035ba71954cb420","sha256":"0a6baddc23406a9a450d9af03969d18aad9354004fc6faaccdfe07acd52cdd2d","sha512":"18e1d4adfd81f736be0ab8356609c30575da58c38514fd92f9550ad03e3938ba9826eb69d08b49cfd90021f407a39ee1c496fe0d3b1c9d5d4ae2df16b30e8153","ssdeep":"","tlshash":"b6810dc5126e142467d6d468467c0e13703034847b5b836cbea9f9efea1dc9c78b78ba","size":3980,"data":"","first_seen":"2025-06-05T16:40:44.115963Z","last_seen":"2026-07-20T22:39:45.02126Z","times_seen":306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-QZ5M56TN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67514d656dce09c5c6cc6d6f8cff07be","sha1":"dd413e94eaf5b53c2635a0575a6a5cbf05a142c4","sha256":"544c6c8875525b91952dd961a406381e8961584b102f4b2b958f523c22c9204e","sha512":"b95ef830a5fd427d3bedd343794f9a352910b1481d563430369fd600282a0c6427537b5017ad9a957ee2c174463068cdd3ef38733feab613c022fd0ce1881307","ssdeep":"192:3R3Mjxz+98txiI2re3pqAf/fkVLodhtIWpGEnwdQhGMy2CG3QiUJSZam81WY:3R3akrIqErXJyKtUJSk","tlshash":"ff7243b2a770b07db691dc536656bb0c5068c061d211cbf8e71aaa4892c3febd37471e","size":16368,"data":"","first_seen":"2026-01-24T12:47:21.29696Z","last_seen":"2026-03-09T15:04:44.286552Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-KXR35LCN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ec02469cd47e0b09afe8da2299c41332","sha1":"598eec6ac26070a7431507a6806899c50549144c","sha256":"74c33f6e6de1243436faa544c727bb734f1e0f2ea4b76b848b5a57f163082f24","sha512":"65ed6fe748c59087c992c1974a029692398263b3524be063b9cc2fe5c30316aba26eb45a7fa3ef5bb1b1eb4fe07513d9aa4b3df7be3069a55ddbcf2ef9dd9920","ssdeep":"","tlshash":"2931618f8260fdb967a9dc9f48940500002024db46c6e1ed7b254cdc2ee5c085bbf7b6","size":1618,"data":"","first_seen":"2026-01-16T09:25:21.152157Z","last_seen":"2026-03-09T15:04:44.334618Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-4YZPY4YW.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5b81867692424bf491ca3241a0742915","sha1":"0b35749f80801f83a29422cd34f42fe6c114baaf","sha256":"7ced85d3747997729679e6642dd521ab89caa31145e07162f5c63e3b1f844e54","sha512":"da7a7438ae7e8923091100e55a46523917fef9a2ecd3c3064b73e2d438c3df05ecd6213072c4329ad36b7f8ad01605e2d13023ad8337f58a60152c78c0e5aa0b","ssdeep":"","tlshash":"a941020d3214757910cbc89d81220b49b2221a5c46269dec7a389ffcd6f4d94233a77f","size":2282,"data":"","first_seen":"2026-01-16T09:25:21.155934Z","last_seen":"2026-03-09T15:04:44.320773Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-HGFJP2CS.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6c0171b602a8c6b0bd93178ac32a38f3","sha1":"8ea8853b4cf7ae02b5bb4b8b5450092fece28417","sha256":"77a8544de9d6d6b687eb86b14981207305f17b7f7bb3bd1fba7116e622e01308","sha512":"603684e5e2ce2f90d565d95a1aeccbb15a26f1d43d8c4cfb14f06198442822572f68021a2a58967aae05e38ae01261752802f01b055cd1d79fd9236349c13e4e","ssdeep":"1536:8Kxy/Mp1iHjm6LHSAHscECCei40RCVrEYSCRPB6H:8H/K1yH8","tlshash":"75636419e141b2266c0595fb09f8c6169fca9ff4cf024399f3148dde838e96e1266fb1","size":72315,"data":"","first_seen":"2026-01-16T09:25:21.192221Z","last_seen":"2026-03-09T15:04:44.272537Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-XYDKJYTP.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"390737e1352ea99af7626fb7d1166a1f","sha1":"52d0912d348d0d112c007a178341b4fe94638792","sha256":"75cde31bca594470385983bbb13002d1ff3a447d45cd24bb0ddc77a18e96f123","sha512":"2d7ef40a11d9e2de48d1abdd4c74057aa9a819a8cc83d1265b6dddd01dd1d860f86dc26d9241264371667a0362da5aea4fdbaa76e1dfbfbf3c60e14e21847cab","ssdeep":"768:C8IMuSKBWPJoIdMKBZ8+oU6i/Y7pYJKtZTe/iKAo:CrMGBz+oU6i/AWiKAo","tlshash":"b1d2d6a9b3197532aedf597984360817db909884900b02bdb15cccee46edd8d33bbb71","size":30263,"data":"","first_seen":"2026-01-16T09:25:21.154053Z","last_seen":"2026-03-09T15:04:44.269072Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-O2XAYGEN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"628c6abf6bd4eb95cd92580479907ec3","sha1":"c6d9cb5943731abfdf5c40986d1235f34a6bf857","sha256":"184f0a19c44992bf83ad25031228691b7d6b16a96e8cf625bd8d3740c6bc8940","sha512":"16d73d405f289502bbbe7c3af1c68daafad992ce9b4641178b55df3e4957de14a0f6c7c2f2d82148e79e7daa3c2eb90dcac72975161d3ba9da6ddd28ef7dbb76","ssdeep":"768:hO99J8dzkBO6gM0VXfZeFHAohFFK8s1PEY1HgCpsJhvx3ZA8:h29J8dzkBKM0VXfZeFHAohFFK8s1BgC+","tlshash":"b2f2d6aa3215b63747cd911a74ba410bf71a64d4440a04acf5acccef7e2cdc962b6f78","size":34942,"data":"","first_seen":"2026-01-16T09:25:21.142178Z","last_seen":"2026-03-09T15:04:44.353486Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/main-RTC5AYOI.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5bdefbf240e7399f2fee1bd069cadf8","sha1":"41d8a4b1cbf80198e2eb30c26c46dc60ebef2f88","sha256":"700c36e331514e4736dd9906a2dec768b16f4caca062edd32e82ef97c8586b2f","sha512":"e4f6805b3db47a3a8a557660d974bb3762da61c4a90cb826bd929878d674150f6096f3868397c2ad576d1150a8cc458e171f116efceb69881ebaff507eca00bf","ssdeep":"384:2Hrbq4wKTtFiNU/OdA7oMEHOHHWNhLQ7N27g:2e4wKTtFiNU/kAwmQU","tlshash":"0262d65a9821703b47a8d87bd8b5c250d22309820729c57ce19e9ea571b4d8cf3beb7d","size":14599,"data":"","first_seen":"2026-03-02T21:06:53.21628Z","last_seen":"2026-03-09T15:04:44.346246Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UUMPDUXP.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"675546d0e73ee3e0a1fb265cf99f02e8","sha1":"0fd62079a0215bdfd44db8438d1a56de08d5f948","sha256":"318e3f7cbe02d788919a28c965b0c51af5170f137424869039f46c7667ddba5b","sha512":"ffc3e8079b2e040c783ced08fa15af9f8268fd94cf49113e86ee62df55710236a42c4d67039914999b902159c4388e1b9541bd0ff8bae1295c8ff0443daf5c01","ssdeep":"96:nNK4WPOn5W0UdsOPWD2iARTqKDf9wPf9wb9N0wQEycIzLlOP5h0xxN7:NFWP2SsOPWD2iADfmPfmbww5y9wP5h0Z","tlshash":"a3b1fa626060257f264ac4954843e1112368d5da832de3c9f766cf2862f4dca967ff3f","size":5356,"data":"","first_seen":"2026-01-24T12:47:21.360386Z","last_seen":"2026-03-09T15:04:44.360416Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"653f475da657f0c71c258ffb7c69e05e","sha1":"002f21d7d55de9453623205fb6745bebaca0b569","sha256":"e33c1f66ca016dc9d2a8d0bf9f8dcfceadf28ec5d43861ecece848e2fb200c52","sha512":"911c814577402bd3822e6b9e707d689a0df7bd7a914b2389fd222284791553d2e9cf0d0aa040e0faa5d6adc3d95e1a77a402357110dcf94037658a14caf5dc1c","ssdeep":"","tlshash":"7ff0ab8b3e9b14702d6b913d577e4d182192321ba084d033bcfcc8152f0879a8a20aec","size":475,"data":"","first_seen":"2025-12-12T21:17:37.555522Z","last_seen":"2026-06-03T23:58:31.112688Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-JGW6FFOW.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"004733fe55d1ed3c66ba893199f384bd","sha1":"e818fb7a0ffe8dd551db7f813e066c29df2ae1b7","sha256":"f53f13ca0cb317d4d51a8139237f2a49dc599ede4038ec70d85d9bb9313178b3","sha512":"5e77f2cacd0540ae8f535871896038208ca6d10617abca4187812961e77353c6e7fbbb8666a952230941e150866974497a94e86be19aafd6af9d010735d34fbc","ssdeep":"96:ndYImTS3BxFjFjIvgY3g9hd3VcWwc2XL+DAFfrUlPiw7/pdjv3:ezSjiD3qhd3mWwbKDAFoX7/pdjf","tlshash":"b2c142d732c3b6058b5d105444764106f31aa9fa1c8e492efeb945cb785cc4a92bdff8","size":5603,"data":"","first_seen":"2026-01-16T09:25:21.134426Z","last_seen":"2026-03-09T15:04:44.283159Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-MKM2ZHM6.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"35a05480954bf9ac64b70d9c0451bac5","sha1":"b3a9fdb81a6a82ddf8a98c5057cdf6c7b3a66161","sha256":"7b902aea0c2a199fcbc10c595cd78702651216688c5a6c76343c660021cac229","sha512":"1f6c3d6c3cd02c7b311aa6a5b64e21ba38a9e3c37064fa7fe25ebbb25b82fc389af8fb0a0f2f41c4bd78678714801cedd8b396bb943838d536f74c734adf900b","ssdeep":"","tlshash":"7751c15e32b55532829c40d7587a05f3f27c29c82a0d528ef7389ece2e6dc18e5749b7","size":2790,"data":"","first_seen":"2026-01-16T09:25:21.167467Z","last_seen":"2026-03-09T15:04:44.355971Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UP4GP3NB.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7852454e422839d1e740ac26dab74e3b","sha1":"c6b20bbc6c17eab838a1fd3e028b9d4a9f9b3f73","sha256":"5ce166bdcf09f46b940d58813540be861633981288dc971b6187058a26ef7b01","sha512":"860d2b490f09a2c57010ff0a528ea8a43747c655961c6774a4c336ca253457052a7632ef5bc0181be07f052f5c5cdc6dc854087e1bd599ec791d3079699b29ff","ssdeep":"","tlshash":"e701b11f219ba27855d5a45c20d57415413854c2327dc0ad3927ec857cbdd4823b9afb","size":774,"data":"","first_seen":"2026-01-16T09:25:21.133549Z","last_seen":"2026-03-09T15:04:44.306906Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-29T18:17:28.180879Z","times_seen":343451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-MIXCASSG.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5872881ce2002cd93df0ba4f18fc3afc","sha1":"de6c0a26c8b18202a9b559600a214551fdf76cc2","sha256":"1b5e72c9749d3286a8dac45684dae53fcf55bc8427b4e00e988d8f6dab573a6c","sha512":"8a47955241ad9dcfb5bddbbfd1d914f2008a9a8275cd46d85e4560d410f906001c4a683eed8f1d7958444fa287c286153b44a7d4c741711218ea13eaf38d80f2","ssdeep":"","tlshash":"e9e02b1ed5609275056dd8f495007621492694aa835782b6900c0e285bb98c7615ff0a","size":391,"data":"","first_seen":"2026-01-24T12:47:21.320236Z","last_seen":"2026-03-09T15:04:44.341877Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-U5KREEGP.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e62e6df1b529c928c65302149fdc5e78","sha1":"90a07bda4d600461bf477386ae235b495dbd12a4","sha256":"0a3f94007bf7698b0c569e1b7ed1b3ae404d206e4e79382fdd90e75155efe05f","sha512":"37b9fa1c85e3b81e769dee5f936740d7232a618c49b9f0193f847fc62dad5fb92bebe20c20c5d93cedfc7cd2b7ea915b37e3f7645a940b47cefd1bcd81b4bddf","ssdeep":"","tlshash":"b221052d9950b0bb178dd8f5e000a921536769e9037e93f6524c0d245be66cbceaff23","size":1263,"data":"","first_seen":"2026-01-24T12:47:21.35584Z","last_seen":"2026-03-09T15:04:44.352295Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-C6I5ENFS.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"35e2f7bfb543ef7001bc54203b44ca6b","sha1":"c68c2922869d396e8dfe95102f79958a58baa297","sha256":"489f53d40dc2a87a2e895dbe5df7789db0810ac66612419e472f45ca2de49cd7","sha512":"7f458c882719ed1773eb5db53d11c571f0026d01a8cd48499dc56e46d61e6309acbcd97e434691d08ee5943d170a988eb0d14c7c43f7f1a8605ea03c0162a19f","ssdeep":"","tlshash":"f52124f6b002f1771288d4aaa8f28a432a5260d23337b17c314d0ccbf5a9d4d5a57b35","size":1228,"data":"","first_seen":"2026-01-24T12:47:21.333783Z","last_seen":"2026-03-09T15:04:44.298135Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-FFVHDUMU.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5da73885dfd3127ca937274da7f85357","sha1":"c3a10a2bf2578a7f3a46ec491ca9dd95479e1ed0","sha256":"7e57abb6f834a05410384ab2c68afea31e366075c60ccf6bed85035cfa985475","sha512":"d425ad03524206c5bc09fe206f98766aa4423e231c6ce74747ebb55d654075af338564aaafe567abbdefc21bd72d0bc27e462ff8182e04d60e59d5366b767757","ssdeep":"","tlshash":"9af08b2e8a0c70f16c218c9ad9408a0697d205ab233647e2e0fc2a3c163b8a3d569e25","size":555,"data":"","first_seen":"2026-01-16T09:25:21.190616Z","last_seen":"2026-03-09T15:04:44.362385Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-VQVQXPR5.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9735363f42979fc0644ff5653af16584","sha1":"fb76a99e51cef30e2948c74733fa758d6fead71b","sha256":"ae45846597e9b85264406d6168c5b6b43650b0077dea13ff0ad280f17b526ae8","sha512":"2dab7c068c967e938e54e7c9362a218281f839c86cfd7ca9fa54d007969476b29fe1df0d2c44a4bc9c0a69ece65226c4536ea9758067a7b93ce41fb1fc146b0b","ssdeep":"","tlshash":"2a2112c76833b12b882aacb3c7c2922896561561c59352c7f2425f2795de9dc632cf9c","size":1230,"data":"","first_seen":"2026-01-16T09:25:21.146365Z","last_seen":"2026-03-09T15:04:44.263438Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-2LBQVZCW.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a04be77ccce45c6804340f4d847cdbe7","sha1":"8fcd1eec0822824d359bdcfaae73298207d375a9","sha256":"772ddb060cad08c6732b7e2a00a3543aa0e554083799a60706409db1dff76745","sha512":"ef7bfbebc829e0b028da19c27c22cf5ca07dd534077c5a4a2c9e340423a362411a47209c5a8ae6dab7c608ac50cd9e0575a4299079baf7a70db7b1bf9d541468","ssdeep":"192:WMhSy3l3lXwtmls5xE4EJ+zZQoCWOMC4p+tLdiPdxNxCUuO:WSZVVAAWNiHR30vxCUB","tlshash":"4c028455601132363cdf64f38479605adae949e8893046b7f0c44fdd479ee84f1afa3a","size":8839,"data":"","first_seen":"2026-01-16T09:25:21.135306Z","last_seen":"2026-03-09T15:04:44.309706Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-C6Q5SG76.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9194e50ce99cab6077285ba20c3ca9da","sha1":"fd4fc33dfc3c6ef846db1272f907a0dbbbb1e374","sha256":"3e8c723ffd97465b96686d20241dbb0014089c6b3336172db89e71e9f17d2a85","sha512":"6340ef79e148b05067bf2a2907ff8612609f1a450a4fa457b32a0d867d71921e7ae77237acd41ff3d8a88abe70c261732be88b5458bf208f60e226dd017177c7","ssdeep":"","tlshash":"0e11dd8266a4bef322b56789c83e0545f214d57a10f4f0d4d788dbb1a0d40a600d9e37","size":1067,"data":"","first_seen":"2024-08-20T07:08:03.187926Z","last_seen":"2026-07-25T02:17:52.244018Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-ITPHOH4V.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"afde0e7c92481b2a083efac366a0dcc3","sha1":"7028e4d381e4b0b0746ab1188bcc42c3a0bcbd14","sha256":"85919ea305b97ba27ccc4f2d98195a3c6c001cc13e774f728afebd9bd6b00fee","sha512":"d1127ca68ef92ae9c40bfb33b3a4b9cd2e09534afdd6f575b5931f605cba1421227d6f7c12d35eef8f9e3762737e01637eefaf3866eaa9040cc74d2615411209","ssdeep":"384:TMirCo4WBMaHea1F8cyfyuNorP06Qeo9wQATO1A0Hjftft2dnhCA:o0pvHeagdfyOE0zg","tlshash":"51c2c7d13391767086af90a718db0005fa341e4ab81a4499f57c9dca7e70d8d63ebf3a","size":26288,"data":"","first_seen":"2026-01-24T12:47:21.310014Z","last_seen":"2026-03-09T15:04:44.346983Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-LXM37KQF.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c3b3414b3209056013d8094a840cc187","sha1":"2f2cd8c01ecf9a03f0d1fb4bad9fe364890e8b74","sha256":"25c43ed57e6d5d2f327e6d2754fe7f1796e5a22fb3711c8e9171a55484827a0c","sha512":"0e9e6a33e5c8750f11bf81783e9ae7ad0bbdfb1d504bb12950c82dc502e3ba16d76c437d608b6debfd704c3e25536ea31a2c78b4762943211920b57426911edf","ssdeep":"384:mF5EwvUSYnI3COiYlQh8S5v5LMy/WMSleJTfxFFyP2DyDm1MvUVZAJsYmVbxKTmD:q5USSOI8S5BLMyAluzFW2D91i9S","tlshash":"9223a57a73e60863d2ed904948b60612c336af8c2c98144ef65c55edb69fd8d40fbb36","size":48820,"data":"","first_seen":"2026-01-24T12:47:21.295117Z","last_seen":"2026-03-09T15:04:44.342539Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PHK3DF4R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4424963de1c4691a7b217ec6678ad2ab","sha1":"2b9c7c3fc16bbb4b16d808a0cb0915aac3f39773","sha256":"9041547f7a705a3823e4a1ad27926a0e927367813988620fb46ec6920831a9f5","sha512":"353e050f507c65ec4569894b97e46f410c37524ea8045d00232563c4087211b951282c5f83ab7d201a9602ac46d1dd8c55cbc351cf421f55c630a5ac42f3ded0","ssdeep":"6144:DJ7O+W4I5W+MZZH9V8QyFbTxRMlKEoxosJIw0:RZfI5W+MZZX8lxoyI9","tlshash":"5e7419cdb7da746243a3a478403f114bb17a7892f88cc894f186d8d42e7496a8277f7d","size":337492,"data":"","first_seen":"2026-03-02T21:11:50.25344Z","last_seen":"2026-03-02T21:11:58.53696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-JKS6J4Y5.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"05074e5427ce1979d4d6b22a5b50ff2a","sha1":"0ff2725b0cbf17fb94bb93b12e67d8fab9688a69","sha256":"293477682c649dcf38dd7f084445b71bd6c18a114313bf74c9a338cd087f4d1e","sha512":"203d822fb9193adbe8dbdb96ec06227267008538bba68afc286922fcbb6708c1d9b3dae86cec2adcbd8a868bfb61d51c060e25ddd0c954713ff2c25ac5e686fe","ssdeep":"","tlshash":"db31234f6241fc7085d4ccee84220640a21294c755dbc6fdb7b99ecde9bad05496eb33","size":1744,"data":"","first_seen":"2026-01-24T12:47:21.304262Z","last_seen":"2026-03-09T15:04:44.27763Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-CCSROYAA.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8c7b2ef5a59c633a0e7d013c254412b3","sha1":"274d20e3f3f4f04d3278e468fc1c3e35680af9f3","sha256":"c52b49dffade50432ae168095f1596e16bd171b55b81051b0cf3d64f9603525e","sha512":"a2d01fb7dd127c4b952d1d9695454a8411cc71323ba81d5b116ce07b3ee807757b985f9301ce56f5da6111c0e5229526f55935c1e0901ef6294c5a237077c869","ssdeep":"384:11rzlPnZHLIJCJbdZDh84SBy8pX2+hzOYyiiPhdISQwymRfuEC5DncEiyQpgdpH1:rrzlm6hK2fdPhewyWf6h/iyQpWpH1","tlshash":"1f72b6c971d7b00657a3f168412f9106b23f9965348e892df92ac8e23d7884dd13bf78","size":17115,"data":"","first_seen":"2025-12-12T21:17:37.551446Z","last_seen":"2026-03-09T15:04:44.267223Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-5C4WPMAT.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"939a830abea9567a0e3eade87ac3014e","sha1":"dff504bffd449ed7428835511936bd0424122334","sha256":"2418a2f9bdb4357062ff385dca277ad5dac2c8c2c493fdeb713ac316844f548c","sha512":"d20d74a5059cd95979c6e434581bc393fdd5d68b6f4da8e4c9d46132bb518e99ec5dcc1972cfc8a29c6179fa1e2848b683a70dccbf39d1a4982a4518fe1350be","ssdeep":"","tlshash":"4b516146b569707f6218c8a8849680150f4551eb4abc478af5a6ca54b1f48cce33ff7f","size":2722,"data":"","first_seen":"2026-01-24T12:47:21.308741Z","last_seen":"2026-03-09T15:04:44.350771Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-7MQQIFF7.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1b8c9a81c61478be9d41fdf90e00d7b0","sha1":"f130fb3c50d8f973fbd01045fa0d652c8896a2c2","sha256":"ffa64bca959b9dbc49f81e4d1bd170e4a2493d3f0c0b99513331d753ad9e6961","sha512":"45214449be6fe7e30da6c8b4bb1ca940cc1bbf5ba92bc5a0938b84a390838df8dd33af59aa8284daf6a636768711df445e6fb19e3b8ce6e3d676a6920ce7658b","ssdeep":"384:zHW1/61j1jBUNgbEzHCxZy6R7CvSmrjPGbHz9DrwzG3eRvOaQID+QmQRQo2trXCN:z21/Uj1dUU+ixZyUExvBxQRxw37","tlshash":"0c4384465504357d38dab13390a1e2c5eaecd897ca302af6f2c48f9a8bcfbd56137524","size":58752,"data":"","first_seen":"2026-01-16T09:25:21.143964Z","last_seen":"2026-03-09T15:04:44.323327Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-VPD63ZPB.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"158b0110d3aff080063be7caee7f9501","sha1":"55ebdf2cae620c14e3bdea3e51e205a8589606ae","sha256":"f1eb9f03939faa8eb0e91128e175da651e28ff164e9e4dd0f3d8b5f9790b2fcc","sha512":"43b1835adf9dc5f1589cb0b79d07e50d0d5e49176bab4aeb79bec01e51caeee14d7567d9dcb8ce4c54f617f6a7ed362339f0b47dc33d681f54b6425589717ad2","ssdeep":"","tlshash":"c4311144b441b1f947e7d0f5a81015711399a66772bdc39962cc04605fb6e82cf75be2","size":1538,"data":"","first_seen":"2026-01-24T12:47:21.359517Z","last_seen":"2026-03-09T15:04:44.343723Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/scripts-APIARQTQ.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a29e83c1c6448c3b19de1893bf423c1","sha1":"e3ed2045a00bb04c389c5a91bb78c1ae72d23173","sha256":"56c0c959fd603b4f1e8b6a78fa6c82947b9fdb7a8a78e1d137ef1569e6a4d013","sha512":"fff1a8f43a23a2a8773f90021020002bc56870ac07e4298059ec5e6ac077090a940cf801bc9cd5a32cfb33d65a25fbdd9b96ca78a41fc4943fdff6a1d5ccadde","ssdeep":"192:yj9c7kSFUBQrlO6gd2H4njwuC86+4ynm1iF5Kuv/ISJhvHIhJPh3Ffol:gEkSFUSrl42H4n8uC86+4yeinKQ/ISJH","tlshash":"91225258ed2576720acb44f4427f1c0fa335e274981544bc3c84e6ec6afd84a7a6bb78","size":10334,"data":"","first_seen":"2025-12-12T21:17:37.52649Z","last_seen":"2026-03-09T15:04:44.28129Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-NVGGWRZD.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5fdfc8cb3eb03233e6160d65a8fd6c01","sha1":"e8b0f6f5ae3370fd6e769d38a2f326ed4acf0cec","sha256":"adb90714691ec4618ed53378ba2cd316074a582a49aa537c6e39fb12b202771a","sha512":"1ddbac2f72dea7c588cefcb0502bda1887b17a264c162a425e4cd6811af2e6ad86256d87e13d646de0a92cd98c9179e1c8e7fa6179c9ce9a70ef278eb2f865fd","ssdeep":"","tlshash":"29d02e3e8041a3bc444e88be9044a6210222842b23ad13e0408f8aa803600d3c37ea0b","size":255,"data":"","first_seen":"2026-01-16T09:25:21.168338Z","last_seen":"2026-03-09T15:04:44.351589Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-J23YWZDE.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"316d5eea0e26e21597b8224d3e6e6c15","sha1":"db447e00c85553e4e3cf1336fdd41fc46b266ed4","sha256":"c046c92d47ffd3ce5434cfd3543d8a7ecb587885036065b1208be3a2ca50356c","sha512":"e1a38bbabf64de4093190e2be7da2cecbb98c8dac96dac641a79dcde2f649e24ecb1c8bee5ec8b19ee75ce1dd1241ad1ede0e1166587e4b70da597fa04d554bc","ssdeep":"96:3xRjuWgQLQQ4rQcnzG/vecEUJu2QcNcSBQkJg:iWg7tpzM7t8oC","tlshash":"a591429b999136e43d7be298696d886edd2715a057708f7260d8c8278dff8eb011f01c","size":4241,"data":"","first_seen":"2026-01-16T09:25:21.183445Z","last_seen":"2026-03-09T15:04:44.265311Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UHTAYFYZ.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"db30916f3c4b3c945469a3a58297bd16","sha1":"490fc002adcd1b4597587a285c2727f866021bb1","sha256":"ca9faf80523587148b089f8e716ba3964feb0879d188ae154036863a76042668","sha512":"5ce25b51bd56bcd1f9967e0589841224fc10187e345e983a98efb1e142247b7624dcf38ef3c8cb185ce551854c8e717d03eb7cc21f53446950e67d2c245d1779","ssdeep":"1536:rETP1BNo06s0Hl6SaNad0Hv/mK6aoUOFh0sQTzo:rETP1BwlInB6aoDF6zo","tlshash":"ca73c6f83382f12687db51a685b54292f23b1dc5244c407cf64cece62886d0996fbfb9","size":75814,"data":"","first_seen":"2026-01-16T09:25:21.151312Z","last_seen":"2026-03-09T15:04:44.295355Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-KGBNNPYE.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"82d4f7c004a94ee16cbcf74bcdfc8588","sha1":"909141154f9d12fd0a4ba42c8e785a559c4fac55","sha256":"491733f881d6736cc0db43db73c5cf827794b4f807abe3e93acf8783c923864c","sha512":"a53c15148d9cc1b5b7e9f8879af077c9b1f02d738fbcef2e3902c9dedb849dad34af917dcff5f7d545e721cc0a80f418137bb7ce11826778e10fd9f9bca9e742","ssdeep":"","tlshash":"822189a3f010617f1752dc828406bf0a41ec8466c324e7c48367d134a6ef5ca61be34f","size":1413,"data":"","first_seen":"2026-01-16T09:25:21.180316Z","last_seen":"2026-03-09T15:04:44.287336Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UVAVXAP4.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"07a9bbbc3e401243822cc253b4556b75","sha1":"49736f2a2bc38581dc5ede028770ad27c69e8958","sha256":"7d1dd781fe49ac5024a9b8f4604e8c9a8b514fa5b4dbf8714efaf9e1a3cbf291","sha512":"d984dc9fae5ae76b4cdd8c6bffcc698b6ea7a8321a66a2018134dcb4ad64851e2f448410ccc89736e8fe2b856d2e2f6d6fab21209036cc0959518cc2d90153aa","ssdeep":"","tlshash":"6251889ac196e17c7705601c78e26da0900c2594cbfc7e687fef5e1669f2e698239338","size":2639,"data":"","first_seen":"2026-01-24T12:47:21.339771Z","last_seen":"2026-03-09T15:04:44.33538Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UXZW2ZYK.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4075007db8ab711d6e931da866ce84d0","sha1":"c460c2e97432b92c28d2af1865c7ce954c543d0a","sha256":"3d64e3e6f22aaaf0ab5954a45bd40a34117b7ab4fde47287aa05097772f3cdba","sha512":"81319efc456bbaf890340dd54fe37a4c34088087aa6cdbe092ca8a1ffa55806e757b8cd6bd0fc0f366e15c7fea7973e19630eb37affc04ea1567eed64802f248","ssdeep":"","tlshash":"82a0121a4851a6b004470cd50044c746411614e513dc97f405045504026d2c3912e903","size":86,"data":"","first_seen":"2026-01-16T09:25:21.191484Z","last_seen":"2026-03-09T15:04:44.300536Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-ELVQYM3L.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a2911b5202f289e87d53a262fc0575d","sha1":"e0e378ad7f63050c65e88dc171db7e1d9005b157","sha256":"ed35b363d64de1b4be1d4004785afd497af94375563fd915a3296847253811bc","sha512":"bf95c5c319ad6a9825e3a024fd3322fbe057878726ff61b403d801797ae2a3846233fadd49856158d4b502d7b9828d79225f1c884919237c65606f790dea5771","ssdeep":"","tlshash":"2e2103ef708275ed009ec4b7d8a13d9601162929170fd3bc37559ccaee94dc94281e32","size":1145,"data":"","first_seen":"2026-01-24T12:47:21.345708Z","last_seen":"2026-03-09T15:04:44.293342Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-7VLEQCBM.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d643532f35e5a1eadf9b4b16e0a0d997","sha1":"e4483728d7675126f00f13907c6dd4b2ba4e968e","sha256":"73062ce747bd0d160e2f006005f4e31090c1bb5e73da12b08bbc60297ec78f23","sha512":"9af161ae1b528d98a089fccf8c65732a26ac59190fbeeb4c2d7a424f45956a26197dd2262e9c58f64a6637fd002637ae4f64ce728422e06085c283ebd39b475c","ssdeep":"","tlshash":"de11ba1b600061be2208cdb0d8be0b1282341e4a052ad7fcb525bdee5ad8ccc897a637","size":956,"data":"","first_seen":"2026-01-24T12:47:21.321155Z","last_seen":"2026-03-09T15:04:44.356838Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-SXNCP4IM.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ae250d72b6cdfbff86f9ccc49051460b","sha1":"c7191b83960fcea7c4843446eb16b9c26414979a","sha256":"bdf7839d3401067bdf090a099ca3156028a46371da76b963c0b5c2ebe63a15e5","sha512":"6bf4486ffd6295a6d181fd01b011626137884d793bbaea8d2253bda6b27e05b99ce886e271d4f5d7d7936654d0b0471e6fc50cd8fe4378d7d2ac3fc98a11009f","ssdeep":"1536:w6O9e1Rj5zOtfWAXlu5m45dPRYeDCStiYoSe1Anw1tKUK+1skzgj:lO9e1ReZluQkdP2eD5Gukzgj","tlshash":"e463d8523716753642cea15d88f60943b32a25854d0a417cb4accedf65eeec932fbb70","size":70167,"data":"","first_seen":"2026-01-24T12:47:21.311026Z","last_seen":"2026-03-09T15:04:44.308292Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-3G7INL42.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"329420ef46507e3ff6d0358d8ec31d90","sha1":"14de87a1e857b83d275eb01c5b6ef0cbe7fae84e","sha256":"fe548cba9dc3d2f6f1cece9716c14cb80952692018e52b542e852f28d8ec9222","sha512":"8c454ed68ac1407fbe02650d8d1ff7c5867bb1e9a6b238bb5797735c9d5a4b3b9c5e655d4311889e4e5c39515c3e4a8102479710b81c2ff75350f21298665024","ssdeep":"1536:9TX868Ju4cr2LdJBv7dTXr5xnh2oexmlLDeSbNtEQz1JiXw:9TxrmdT75xngoexQCSbfE8ww","tlshash":"16a309c6b212762b03d791b9a0fb5403a32955500409006c76fddede9bacf8cb2b7bb5","size":102661,"data":"","first_seen":"2026-01-24T12:47:21.317403Z","last_seen":"2026-03-09T15:04:44.279303Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-DIBRREDF.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"809e94d8be979e2ae8b525e3ae879d77","sha1":"841d271f600f4f15b1e88df8cf219a9873fd5829","sha256":"36b91499dd379de103a446478f9413346d25e6226a34732eb7109a1a3f0206ce","sha512":"fec2288db3f0ab7eb59681228fa0d51e936912f69d1657932fe00d216cebd8437ebc003c588ddb25b1099df3e0c6d66705ef5208b68739e771051dfb0b7e761a","ssdeep":"768:zZWeqs49tLwLKbKwE4oJih9a9oUNE/JJq:zZWeqscLwLmKwE4oJih9a9oZ/y","tlshash":"cbf2b9d5d100377ebf66b39981a7862abfd02ce88c517660b4459cbe81ded9b200f637","size":35702,"data":"","first_seen":"2026-01-16T09:25:21.175192Z","last_seen":"2026-03-09T15:04:44.347633Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-XO7XCJP3.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6c439224db9e71646dea8eca2727e090","sha1":"e7f97f40cc6b70a8976820fa679ac11d669ede38","sha256":"9bff3548db6d113c7d3843a2233a864fb8258772f3481182e4dc6c5ce4d5bdfe","sha512":"68a82a23d392312fec7537be88cd37184b97a50a688025095e80f63b048d999269aa788b86d497614a2aaaa69966ca95bc2761a5bcda61b468ba85c135b16b61","ssdeep":"384:tHJHKyMs25tMnse/h5E478ALQNlbTOChS2vsovYpUg+Er2eBpWHwwCoIzAT/6B2:/4sNc4J+Q1uwwYzg/6B2","tlshash":"a9d2d9897242f11647d9c3a9c07b3467f13a64c8584b0c6cb16ee9da6c74e4b52fbbb0","size":29304,"data":"","first_seen":"2026-01-16T09:25:21.147258Z","last_seen":"2026-03-09T15:04:44.304854Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-PC6T3RFO.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4cc56b7a8fadbdac03f7751e9abc24b","sha1":"2f918aedbc3ea15941541c0702eb66a1746656d1","sha256":"d0b520224d5ad6879a7f2899c6332ab4985897b2a509a56448db986dd1ab8288","sha512":"99bb25a2714a6a3c95f99112da6d8446d56fed837fed2d3085282e42a799fb295a9172075a01d1c27133791faed1cf66cf49f5b79a933f150c351bce8d7bed16","ssdeep":"","tlshash":"1b31e93aa900f15825dacdf4da11e372527b088383f4c3b5dade0b3847165a2d37d967","size":1779,"data":"","first_seen":"2026-01-24T12:47:21.358546Z","last_seen":"2026-03-09T15:04:44.350017Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-F7IHP62J.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"554bac3bf2933c53f678349491551ec3","sha1":"342e49550ee7dbf7826b7793ec218e93dab7312b","sha256":"750784476e94b2c9f7c81f14ef60304e023a085bb8548f462c613702b9bfb5a9","sha512":"2cb3cf9c4aa3c9c7354fdc72d7a78044c0ba8cebb85f49dd07f398a78db36d747350ee84f5589fbd14160a6d0b60fae8e90ad63444c5ec1b26cda3b67f3907d5","ssdeep":"192:r6lunmPP23tMdaBtKzb/fhJfc8kHY3ozheJsuqoDpT6vJTet:r6lumgC+4vkE7t2E","tlshash":"5712738b52423933078fd29be1f002536a354ce9a91b052c70b89dee57dfd4876aab71","size":9664,"data":"","first_seen":"2026-01-16T09:25:21.178478Z","last_seen":"2026-03-09T15:04:44.357651Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-ZABQJ47X.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0e5a8b53c01cbf41916e9ca9ae43bddf","sha1":"1e20188ebf5fc77ce2372d2334fde0e75fcf2a19","sha256":"c0ca49ea4d32b810913cfeb3768fd49ebdde69bba8a7e946d07a13d01fb9daee","sha512":"841e557b8ade22f744771f17c53f8e47d85f81c622c08936dff6333490742ece6f156f17a9371b893aa9d881da9da59a3424697d87461dd130eaa466f67e1d4f","ssdeep":"768:Gi9iR/wi4HMF1fPDYRThEAXyKxn+HVkCiDhnt+1eAtlJ08mIZG+RkV7yDtZ1Ty5S:5iR4jHMF1fPaOHMQhLNj","tlshash":"88d209997396f9330bc95498c0ba0987f3191495614d882cfd39acfb78a0c89a5f7fb4","size":30118,"data":"","first_seen":"2026-01-16T09:25:21.138892Z","last_seen":"2026-03-09T15:04:44.303184Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-Z4PT3C7G.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8f47970279218f892bf8193751c48237","sha1":"170a6c2fe0e5d6ef19fec41b92146db0ac403b6e","sha256":"f0eeab5bc97043fca6e310b71434dd30dbf3548c097c7ef49902d33ebe8c52d0","sha512":"35f459d3e48ae08f30ad3a3905d05eaf12ec7d41d09ea6b2a0d6333546ae2b440f80fe09a78039d5987a8e5bfd0da04660a28218a8014670fd28dd9e565b644e","ssdeep":"","tlshash":"f121e099704ded3a6a824351cd153c89fa040afc473bc341f1c6d770daace4d293e899","size":1276,"data":"","first_seen":"2026-01-16T09:25:21.129988Z","last_seen":"2026-03-09T15:04:44.344563Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-6MXBTSEY.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e2c27f7bac747aef5a75c11368a7daa","sha1":"04d2d657457838d064b6225007dc727af751547e","sha256":"9f9c4e7e6d92ac69bd426ecce01752732e9c73c371a891591627936762f2b39a","sha512":"a184a2fd7fc2c3a8d57b1ee62dc1929f8a5503056ee55f85d6b2c1d1805939ea9f836b1f8c3632fb9eae3fc982f2dec2df36577f701e78a8e6fc8aa086204319","ssdeep":"96:NO/FLn1cQ4LumMzITDr33/6Tr/3V6UIKRa2GmZgV+CHkKb:N+hPOumM0fr33/6nFEuGdQCHz","tlshash":"a0d15567778174be618dccb48842a301516b844382b9d3b8e6ed896c47f2dcb52bd73e","size":6233,"data":"","first_seen":"2026-01-24T12:47:21.305898Z","last_seen":"2026-03-09T15:04:44.355196Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-QSPLAEIY.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"93c0de251ca505c2af873170f77f2706","sha1":"e310a4b2bead1be929cc8b7efe82b67b48929eda","sha256":"3c6c091c2171ffee1e4b3bd34fa262ae6c80d30d75d4ae75acbca22a98db0a7b","sha512":"4817f146265e20aba40de2039b839e0da7b3d20ae2bcd1544dc2ce988bdaaf3a2db90e42a2f8e5c093b60c34911b66a8a4ad76a88e45bdfe60f859e707e95b33","ssdeep":"","tlshash":"9a21c15f9480157a418cc8ddc49aae5923593ac043c891bdfcbadcc606e4ccd92b3bf2","size":1380,"data":"","first_seen":"2026-01-24T12:47:21.332883Z","last_seen":"2026-03-09T15:04:44.288665Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-6ICS43TQ.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"561d83f7a3697635bfe19e09a91295e0","sha1":"1b7aac28b5f61d98d803c15ed0e81e31f666fd05","sha256":"aaf9a84b407eb49320e8fe04a6d198620b0b383948de0d39bcab5cf7b57e8ccd","sha512":"7a1400920730f1d9186c90d93638578ae2e00e2c55fb35aad2dc560230bb57440c6e649e63f2ad54c9e637176aec157fde75a42dabf6cfaffec0f204a8bb2bea","ssdeep":"192:8SBYRVA1V9F9JAXwalI40zo330Qiyou4D98BKkA3B8/dAJHqTG4udfBGHcPWye/t:zjrRE30QddARkb6T1Li","tlshash":"17323fd933ebe52042958616aab10086f23d9cd4983a5c0cb76638d7fc95d2d67afb30","size":11190,"data":"","first_seen":"2026-01-16T09:25:21.174225Z","last_seen":"2026-03-09T15:04:44.343149Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-KQNCXCGO.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a4fac33a4ff52e0298bc49c61cd5848e","sha1":"dc56c6738491dc875170fd930ae0b96471c9d8df","sha256":"8d6acae2e952b612c2bb8eb2cc169948a0cf614f1b743ac0a4744f32474b9840","sha512":"9b94385624f2522c49c08c1acb8a32da19b1acb66df11786789ed0bff2164478e898f91b2690d90cd16537350f10dfd4524a2a314ad9bbe3c752f9d4d599083e","ssdeep":"384:eK93hyAICMsu9yfE+bB6hap6hP4E3ccx0J05sw:b9TIf4/B6hap6hAE3v0JG","tlshash":"d242e9627211f273539a00b4ad705507eb097aaaa80a4c0df11cdadfb17dc4592fbb7e","size":12419,"data":"","first_seen":"2026-01-16T09:25:21.166456Z","last_seen":"2026-03-09T15:04:44.339097Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-LP3WF2KP.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"898572c0987b4ecbbd105c414bcf3e2b","sha1":"91e10409390c7b62faa94dc360d978b0e16330b3","sha256":"3c20ce2b7abde3af7219cea0773c64a115906e6e44befd20bb37f3b73ce4a588","sha512":"10fefaed7155050c5825c4ea0760da55d397b24db8f1345d0595e749975a8b1d38e4615ad0e0a7469e2b4cddea513a0b86379ab3c4df5aa1de005e9b0633f864","ssdeep":"3072:tQfn3TSxQrsOWsbqiaZmIAd4Sl9Psseoo3yIe5aU5rLn5:MmQcmI24Sl9UseoV5aUd5","tlshash":"c3f3b3dc7696b02383ae117640bb0447f37968821c4e042cb5a8e9ef397595da2f7f78","size":169364,"data":"","first_seen":"2026-01-16T09:25:21.193063Z","last_seen":"2026-03-09T15:04:44.321879Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-5CFTRXGZ.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ee641bf1732bfd0e7987f79613ea42f7","sha1":"ff21d9d74706fafb9d85802dc953f9d8cd182995","sha256":"69450ba2353d66b9722e8c6efcdee1637c09cb910dcab809f58995cbb31a6cf6","sha512":"4fcddc25559ffd546b61e886d71b3a6085f2ebdddab7f36c29587b6d400be5f4ed5b73c9c0a4018f27c4c42244ef92576f2075cf2c3cdc47c053b81619146981","ssdeep":"768:vDstDRS/o0zYtQRJU689HifH6DUdXPPTXq5+ZtMzHT7qNU3BPe+MnWW7Ip1:vDrk9HifHrN7XFUzHT7JZvMnjsp1","tlshash":"39437394a2003037ba8eb57688f04a26dde46ad5bf01155cb1a88fed41deda8137f737","size":60538,"data":"","first_seen":"2026-01-16T09:25:21.17601Z","last_seen":"2026-03-09T15:04:44.288069Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-RVSN6VOA.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8b52cb1c62ad587c9e4a17dfad09d42e","sha1":"b51d56fd1e9e7c9c934c2edbbcfd71ea6e6791d9","sha256":"eebaa9f12d6989a27fd40862e7387b254d51341451bbf5b939ccf7c0485e03c9","sha512":"efba5b885ca554336e7d1c7665cd89506169766cac1008b754bd323168e3e47cd27b6d19955dff78403aaa444a66d6bfba9d92e9444db5a35b968ab75090d318","ssdeep":"","tlshash":"8d2133db6746697d5389d068c0760645924a0c6813efc4d3d1839d5177bc20b07b6bc6","size":1342,"data":"","first_seen":"2026-01-16T09:25:21.155165Z","last_seen":"2026-03-09T15:04:44.270966Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-ZSZ6IXMM.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2186bb088b7a6dba824486936e13ccbc","sha1":"ebfbc133a7e9782bf19e987557bddd22bf94a1e5","sha256":"f3ff9411c710634b2348af6a0c311a5bc3d85f6d4c43e00d70b7c630ae3f7b12","sha512":"b0fe1314215cd9bb2422f7a92d0aa7c553410f9824166f165706f6db101f15c516f776353f58731564977ca429685358d080f4357d7b422d622a9d063ec03b5b","ssdeep":"768:Pnoc0yATUeZvnfj4VGdUjLwlJyQiw/d+Lyc7Kkto7RoLARvBtbti2O2n5blpm1kA:PerT+gJyQRtbti2O2f4SZk","tlshash":"dd33b76833046812c3cee11fd4b7050ba33a6942ca0b415c76ac9def5a5df89a1b7bf5","size":51503,"data":"","first_seen":"2026-01-16T09:25:21.170026Z","last_seen":"2026-03-09T15:04:44.310578Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UA5SRARN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"137fd5989236748444ef7756a5fc125a","sha1":"45591832c91572f2aef5afc3bd0598dcf792b07d","sha256":"0ae0edc13f216809f9a48f7c82431370abe4f1a88bb23041e6b47d5abd5578f0","sha512":"5f4cf0a75a3fd4ec7691a313ac42d015351b448e03e73a674eb3b253be7f7c313c50e38c6512e54b1c66ffe0ab2859781a08a391f30def6b8d324aa8a1355c00","ssdeep":"384:CshT1yR4YmwOlD+XJJfhi11lohz16daPuL+O3XJAcDiXOB6gkE154DOiE7ydSYxg:CWAl2DmI54mdBX430QRksl9aLOtPy","tlshash":"2b13c68ab266f23407d9a09c94768583e31d98d1a404406fbab8fcdc35edc9466bff74","size":43380,"data":"","first_seen":"2026-01-16T09:25:21.187002Z","last_seen":"2026-03-09T15:04:44.358513Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-JFXPK6SC.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d125f9a7ae55a92199c1389014e49888","sha1":"2a27716d58fea806096020c0bbd3907f38799491","sha256":"cdf56401b9607c06f5a3e96a0b0ecc983f4280f1dcfa92c5861f7cefa41f4fc3","sha512":"640059585e75629f1be72fc9bc09a6c2c0d92f750db97f43d78f2bbc564a715cb4c80db4c6dc4be623e4c35f65f6f7d828861223641635ac8c29b5c328dd4f03","ssdeep":"384:Th27g7uESi0OK3qbeqSX0uOaQHD+QmQRQs2trXmyX2xZ3opi1s2xZz:F/vebPGxFBxh","tlshash":"ebc2419b9e0125fa3c3752954960960a9afdd8c09b001fbeb0c09c6b4ddf9d6a13f93d","size":25983,"data":"","first_seen":"2026-01-16T09:25:21.171823Z","last_seen":"2026-03-09T15:04:44.354337Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-LPD2KKQX.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f9ed3dda901044fa28cf3af6db3d5533","sha1":"c34730d74028c4797d4ca0c3db7400833099a8a5","sha256":"229af9decb479624908f198d7116eefc4e361f70e1c2f4ca18a5b2fd12c7ca38","sha512":"bc280d3886502f19eae953496fc0b3f248a3fd79c3f8eee8ca754165a1f00f8c5266ec24ba0899ddaba4ccc43c5b303c5d03a3c6527f5b5f6cd3af6da8c8d015","ssdeep":"","tlshash":"0b80047f043105fcd154400d455044c15c00d17c031055d0410041040377140c514445","size":36,"data":"","first_seen":"2026-01-16T09:25:21.128201Z","last_seen":"2026-03-09T15:04:44.341296Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-74Y6435D.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3843fe9ab4295bddbe487490c5964b08","sha1":"e637712e95578d84caf57d60f69a8b92afed1cfa","sha256":"abf933f2138806d4bcb6364d05ae746a435788f2b2055e4ec81c29dd11fd6b67","sha512":"2af6a4aa0007c38123d5f438f58d13e5f2438cf528d0de4882c412b959c4d00ba7897440482156aebd3f7c8b5d797da1c57b2dac7ed78ce11a54e4e21b183a7e","ssdeep":"192:F1YLEsYc/UcsJhqOMBXsmICuycSRSpAKLMxk6omoKedgQg:F1zHc/UcsJhqOMdv+0RSpAKLMl/oK5","tlshash":"401200bccb110d75a8860cda45d64506aaedd842060f9709b5d0c8bdc2eb9fb593f7bc","size":9066,"data":"","first_seen":"2026-01-16T09:25:21.139687Z","last_seen":"2026-03-09T15:04:44.336243Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-VTRTW2ST.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"14d16a9b21000b9130e3e54134089753","sha1":"c6578fd420869260896caf849ca586df4e28b700","sha256":"c506660861b862f748500351e7e8bc49a36c66cbd6dbeb40708b974679acfe7e","sha512":"60185599299350fcfea091a77c3e39372d3603a5479e9b4213791e44026b164ced3e4cfd7b649dd4ca891f85f1a43c429cd0e194ffe05e0f3436690897eabb5a","ssdeep":"","tlshash":"c151a7d65154b1be7295cca1c4c2690a677c9ca75325c7f4a06d8c385be0bd431af33e","size":3111,"data":"","first_seen":"2026-01-24T12:47:21.303222Z","last_seen":"2026-03-09T15:04:44.284571Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-5IBRIFLR.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"25e92913af6f5de170350bed39243a5c","sha1":"2047eaa242b2209b0f162772521db036a17a209e","sha256":"42f7adb618114e4dd473ec068dbf702998362d48128fa2c0f45986d3fe71c396","sha512":"d63898aaa6dda65616ecf29a8944afa5cad66500c133088a1391719fe0d6aa9a06f4d284d52524f2cf798e604d42e54ec6abface48585eecb3f6aab96f795fac","ssdeep":"96:EKp35hDyvwzxBLz1gtyltzKazt8w0cSZ2WVjsvWuDarzJI4u4IVza0SUIN5a:ES5w+Xl9KS9vw2ijsvWuDaP4","tlshash":"74d1b7daf172703e358b54bd14e272084e6e0ca09703d3d86a68bba561dddcf339e129","size":6468,"data":"","first_seen":"2026-01-24T12:47:21.306815Z","last_seen":"2026-03-09T15:04:44.333967Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-6MXBTSEY.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-6MXBTSEY.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-PC6T3RFO.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xmY6GalPuc7nSPG%2By5UrVI6lXhOv1Tg%2BlPSIsRQbk0eHpPPVDosGEoYhh9tkBN2tbUrk4R75pNNXlUVF3c7nT2VV4quVmS3H9UbpMecP%2FqkYLJ4xaDdx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c7b978527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6233,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6232)","md5":"2e2c27f7bac747aef5a75c11368a7daa","sha1":"04d2d657457838d064b6225007dc727af751547e","sha256":"9f9c4e7e6d92ac69bd426ecce01752732e9c73c371a891591627936762f2b39a","sha512":"a184a2fd7fc2c3a8d57b1ee62dc1929f8a5503056ee55f85d6b2c1d1805939ea9f836b1f8c3632fb9eae3fc982f2dec2df36577f701e78a8e6fc8aa086204319","ssdeep":"96:NO/FLn1cQ4LumMzITDr33/6Tr/3V6UIKRa2GmZgV+CHkKb:N+hPOumM0fr33/6nFEuGdQCHz","tlshash":"a0d15567778174be618dccb48842a301516b844382b9d3b8e6ed896c47f2dcb52bd73e","first_seen":"2026-01-24T12:47:21.305898Z","last_seen":"2026-03-09T15:04:44.355196Z","times_seen":21,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-5IBRIFLR.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-5IBRIFLR.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-QZ5M56TN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNo22yrOPypCh%2B3qPPkxnqr00s4WY9tOI36BUb2GtVMBvYaDnjCYWLAV6zulZdFVu1U22tuzwYw3%2F7LIXf6z8IYOd6cWZhaiPHhqyRALDmv2XPapik7w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c80a0e527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6468,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3876)","md5":"25e92913af6f5de170350bed39243a5c","sha1":"2047eaa242b2209b0f162772521db036a17a209e","sha256":"42f7adb618114e4dd473ec068dbf702998362d48128fa2c0f45986d3fe71c396","sha512":"d63898aaa6dda65616ecf29a8944afa5cad66500c133088a1391719fe0d6aa9a06f4d284d52524f2cf798e604d42e54ec6abface48585eecb3f6aab96f795fac","ssdeep":"96:EKp35hDyvwzxBLz1gtyltzKazt8w0cSZ2WVjsvWuDarzJI4u4IVza0SUIN5a:ES5w+Xl9KS9vw2ijsvWuDaP4","tlshash":"74d1b7daf172703e358b54bd14e272084e6e0ca09703d3d86a68bba561dddcf339e129","first_seen":"2026-01-24T12:47:21.306815Z","last_seen":"2026-03-09T15:04:44.333967Z","times_seen":21,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-FFVHDUMU.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-FFVHDUMU.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0toz6nbLwlHA6I2B08Vr2n3fLFFgdaSfuEZ7i04v1LXKYhpYiMoJNfXM%2BtenH5qdjtYRALiR23xzl4ne80zWDQZxYs2X%2Blx%2FhfD92E3k%2F7H%2BhH4JXnsq\"}]}\r\netag: W/\"698a33f2-22b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364bbfbe2527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"5da73885dfd3127ca937274da7f85357","sha1":"c3a10a2bf2578a7f3a46ec491ca9dd95479e1ed0","sha256":"7e57abb6f834a05410384ab2c68afea31e366075c60ccf6bed85035cfa985475","sha512":"d425ad03524206c5bc09fe206f98766aa4423e231c6ce74747ebb55d654075af338564aaafe567abbdefc21bd72d0bc27e462ff8182e04d60e59d5366b767757","ssdeep":"","tlshash":"9af08b2e8a0c70f16c218c9ad9408a0697d205ab233647e2e0fc2a3c163b8a3d569e25","first_seen":"2026-01-16T09:25:21.190616Z","last_seen":"2026-03-09T15:04:44.362385Z","times_seen":22,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-2LBQVZCW.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-2LBQVZCW.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLg9C4I3CxG2MBj9u27gThivlCRzDZYf%2FyxVUZ6Ju0e68DUmwe44jffqKYERqLyl4ZaZt5rD1S2g4kvuzRGmNWL4r7m1AuPfq34ILTMI5sFdqMykXfes\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c69527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8839,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8527)","md5":"a04be77ccce45c6804340f4d847cdbe7","sha1":"8fcd1eec0822824d359bdcfaae73298207d375a9","sha256":"772ddb060cad08c6732b7e2a00a3543aa0e554083799a60706409db1dff76745","sha512":"ef7bfbebc829e0b028da19c27c22cf5ca07dd534077c5a4a2c9e340423a362411a47209c5a8ae6dab7c608ac50cd9e0575a4299079baf7a70db7b1bf9d541468","ssdeep":"192:WMhSy3l3lXwtmls5xE4EJ+zZQoCWOMC4p+tLdiPdxNxCUuO:WSZVVAAWNiHR30vxCUB","tlshash":"4c028455601132363cdf64f38479605adae949e8893046b7f0c44fdd479ee84f1afa3a","first_seen":"2026-01-16T09:25:21.135306Z","last_seen":"2026-03-09T15:04:44.309706Z","times_seen":22,"resource_available":true,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-LPD2KKQX.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-LPD2KKQX.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcv908mEAkkfxeFpWRzW1W6vsiOKONKGT28fhyLr4a7ct8%2BCZU55jDmmro93CJZE45u9dHpY3cHem8L6RGxUh%2FJacs2Le8u%2BssD7G1HZYK3ZmP6x0PYD\"}]}\r\netag: W/\"698a33f2-24\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c76527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f9ed3dda901044fa28cf3af6db3d5533","sha1":"c34730d74028c4797d4ca0c3db7400833099a8a5","sha256":"229af9decb479624908f198d7116eefc4e361f70e1c2f4ca18a5b2fd12c7ca38","sha512":"bc280d3886502f19eae953496fc0b3f248a3fd79c3f8eee8ca754165a1f00f8c5266ec24ba0899ddaba4ccc43c5b303c5d03a3c6527f5b5f6cd3af6da8c8d015","ssdeep":"","tlshash":"0b80047f043105fcd154400d455044c15c00d17c031055d0410041040377140c514445","first_seen":"2026-01-16T09:25:21.128201Z","last_seen":"2026-03-09T15:04:44.341296Z","times_seen":22,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-74Y6435D.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-74Y6435D.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k96vt7hHgszHw%2BVL4FdfO8kNDdNvd5AgNxFwqBfU%2FyXqskXEedNiyaGiP8Zx0htuq14ZCUQTUwOcr0c0C1N7o2M7LBfRB1RErg0LU6ennsL8pFBlwREc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc5cb0527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9066,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8997)","md5":"3843fe9ab4295bddbe487490c5964b08","sha1":"e637712e95578d84caf57d60f69a8b92afed1cfa","sha256":"abf933f2138806d4bcb6364d05ae746a435788f2b2055e4ec81c29dd11fd6b67","sha512":"2af6a4aa0007c38123d5f438f58d13e5f2438cf528d0de4882c412b959c4d00ba7897440482156aebd3f7c8b5d797da1c57b2dac7ed78ce11a54e4e21b183a7e","ssdeep":"192:F1YLEsYc/UcsJhqOMBXsmICuycSRSpAKLMxk6omoKedgQg:F1zHc/UcsJhqOMdv+0RSpAKLMl/oK5","tlshash":"401200bccb110d75a8860cda45d64506aaedd842060f9709b5d0c8bdc2eb9fb593f7bc","first_seen":"2026-01-16T09:25:21.139687Z","last_seen":"2026-03-09T15:04:44.336243Z","times_seen":22,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-Z4PT3C7G.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-Z4PT3C7G.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-QZ5M56TN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojFXLsfC37Ws0VSywHwZi8NJNwe3qFcz%2B4FQJANqwkwMn9Ee6JGT0qKfwZokS6Ia6jGnGcalAGb9zhQKQn%2BWFslonnMxGM5wxPFFJsZ5GRfGk8ElD2hR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c80a15527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1276,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1207)","md5":"8f47970279218f892bf8193751c48237","sha1":"170a6c2fe0e5d6ef19fec41b92146db0ac403b6e","sha256":"f0eeab5bc97043fca6e310b71434dd30dbf3548c097c7ef49902d33ebe8c52d0","sha512":"35f459d3e48ae08f30ad3a3905d05eaf12ec7d41d09ea6b2a0d6333546ae2b440f80fe09a78039d5987a8e5bfd0da04660a28218a8014670fd28dd9e565b644e","ssdeep":"","tlshash":"f121e099704ded3a6a824351cd153c89fa040afc473bc341f1c6d770daace4d293e899","first_seen":"2026-01-16T09:25:21.129988Z","last_seen":"2026-03-09T15:04:44.344563Z","times_seen":22,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-5CFTRXGZ.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-5CFTRXGZ.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-QZ5M56TN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2BA67KRbReNOARheGmNQ3KJ6tWIFAPUoP8VYbps1uA3MSmFI3UbKfGJS9%2FAIsyPxaDGqanFdrLxJe5ot7wjD7r%2F1NQ6WcedHVg%2FuksOzYdI3p5pc8WnL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c80a1f527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60538,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (20941)","md5":"ee641bf1732bfd0e7987f79613ea42f7","sha1":"ff21d9d74706fafb9d85802dc953f9d8cd182995","sha256":"69450ba2353d66b9722e8c6efcdee1637c09cb910dcab809f58995cbb31a6cf6","sha512":"4fcddc25559ffd546b61e886d71b3a6085f2ebdddab7f36c29587b6d400be5f4ed5b73c9c0a4018f27c4c42244ef92576f2075cf2c3cdc47c053b81619146981","ssdeep":"768:vDstDRS/o0zYtQRJU689HifH6DUdXPPTXq5+ZtMzHT7qNU3BPe+MnWW7Ip1:vDrk9HifHrN7XFUzHT7JZvMnjsp1","tlshash":"39437394a2003037ba8eb57688f04a26dde46ad5bf01155cb1a88fed41deda8137f737","first_seen":"2026-01-16T09:25:21.17601Z","last_seen":"2026-03-09T15:04:44.288069Z","times_seen":22,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-MKM2ZHM6.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-MKM2ZHM6.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-QZ5M56TN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B790BEPPPdlw9YHpyOnEHKWnYdc2XXypCIZnpfPfmhWRQOXW%2FA9LQyvRIJlrbXXWUaRUtiCQA%2BEaGUKih9hIkHdssdzU9kOmdOQap7pa2YZ99iZZj%2F2a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c80a25527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2790,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2789)","md5":"35a05480954bf9ac64b70d9c0451bac5","sha1":"b3a9fdb81a6a82ddf8a98c5057cdf6c7b3a66161","sha256":"7b902aea0c2a199fcbc10c595cd78702651216688c5a6c76343c660021cac229","sha512":"1f6c3d6c3cd02c7b311aa6a5b64e21ba38a9e3c37064fa7fe25ebbb25b82fc389af8fb0a0f2f41c4bd78678714801cedd8b396bb943838d536f74c734adf900b","ssdeep":"","tlshash":"7751c15e32b55532829c40d7587a05f3f27c29c82a0d528ef7389ece2e6dc18e5749b7","first_seen":"2026-01-16T09:25:21.167467Z","last_seen":"2026-03-09T15:04:44.355971Z","times_seen":22,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/scripts-APIARQTQ.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /scripts-APIARQTQ.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvIkjp4LmpfNdXIiAFgO0JU4xJwyiLfVQcwU%2FcZPngWLoZLfE3iF1T1mFSr%2B1L9hWn8UcDeGckS9gakILjKpd5u3G%2Fx3aVkkQIG8p0anEKOtClFJFv3F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bad9cd527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10334,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10333)","md5":"0a29e83c1c6448c3b19de1893bf423c1","sha1":"e3ed2045a00bb04c389c5a91bb78c1ae72d23173","sha256":"56c0c959fd603b4f1e8b6a78fa6c82947b9fdb7a8a78e1d137ef1569e6a4d013","sha512":"fff1a8f43a23a2a8773f90021020002bc56870ac07e4298059ec5e6ac077090a940cf801bc9cd5a32cfb33d65a25fbdd9b96ca78a41fc4943fdff6a1d5ccadde","ssdeep":"192:yj9c7kSFUBQrlO6gd2H4njwuC86+4ynm1iF5Kuv/ISJhvHIhJPh3Ffol:gEkSFUSrl42H4n8uC86+4yeinKQ/ISJH","tlshash":"91225258ed2576720acb44f4427f1c0fa335e274981544bc3c84e6ec6afd84a7a6bb78","first_seen":"2025-12-12T21:17:37.52649Z","last_seen":"2026-03-09T15:04:44.28129Z","times_seen":26,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-HGFJP2CS.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-HGFJP2CS.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aglviKI7%2FfRW74mBxIAFmgnUHDFPtVnEjBh0dNrkBMw61xqaWg%2Bt3ImDv0CZAWsVVXJYUTneY5KjcRp0jrxX70rX3LFvAMrjL0cGGfS2D5uofHJAowMF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc5ca4527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72315,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57446)","md5":"6c0171b602a8c6b0bd93178ac32a38f3","sha1":"8ea8853b4cf7ae02b5bb4b8b5450092fece28417","sha256":"77a8544de9d6d6b687eb86b14981207305f17b7f7bb3bd1fba7116e622e01308","sha512":"603684e5e2ce2f90d565d95a1aeccbb15a26f1d43d8c4cfb14f06198442822572f68021a2a58967aae05e38ae01261752802f01b055cd1d79fd9236349c13e4e","ssdeep":"1536:8Kxy/Mp1iHjm6LHSAHscECCei40RCVrEYSCRPB6H:8H/K1yH8","tlshash":"75636419e141b2266c0595fb09f8c6169fca9ff4cf024399f3148dde838e96e1266fb1","first_seen":"2026-01-16T09:25:21.192221Z","last_seen":"2026-03-09T15:04:44.272537Z","times_seen":22,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-C6Q5SG76.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-C6Q5SG76.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdFCVDBf459H%2BBhR17Njm8vj%2FgFkBDK7nMAFdnYgRi%2BgXnnqVB554ZJxTsVwNeK0m4jXXF5mVc6DUhGHA%2FtPjt67FG7meU%2FAa3I1ta1TTjTKZPrRAFOI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc6cdc527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1066)","md5":"9194e50ce99cab6077285ba20c3ca9da","sha1":"fd4fc33dfc3c6ef846db1272f907a0dbbbb1e374","sha256":"3e8c723ffd97465b96686d20241dbb0014089c6b3336172db89e71e9f17d2a85","sha512":"6340ef79e148b05067bf2a2907ff8612609f1a450a4fa457b32a0d867d71921e7ae77237acd41ff3d8a88abe70c261732be88b5458bf208f60e226dd017177c7","ssdeep":"","tlshash":"0e11dd8266a4bef322b56789c83e0545f214d57a10f4f0d4d788dbb1a0d40a600d9e37","first_seen":"2024-08-20T07:08:03.187926Z","last_seen":"2026-07-25T02:17:52.244018Z","times_seen":200,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-VTRTW2ST.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-VTRTW2ST.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-PC6T3RFO.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBliINCg%2BQrLpmJoJ593QJ4Et12Ex8FfEkd2pdXl%2BZf8SD5BrSLYxVrzq7rdhQab7Dzy9ww5jLdfLZuX7Lycz8E%2BNtv9%2FfbCbNmcvV8LqdGaj%2Bvkwak8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c6d808527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3111,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3110)","md5":"14d16a9b21000b9130e3e54134089753","sha1":"c6578fd420869260896caf849ca586df4e28b700","sha256":"c506660861b862f748500351e7e8bc49a36c66cbd6dbeb40708b974679acfe7e","sha512":"60185599299350fcfea091a77c3e39372d3603a5479e9b4213791e44026b164ced3e4cfd7b649dd4ca891f85f1a43c429cd0e194ffe05e0f3436690897eabb5a","ssdeep":"","tlshash":"c151a7d65154b1be7295cca1c4c2690a677c9ca75325c7f4a06d8c385be0bd431af33e","first_seen":"2026-01-24T12:47:21.303222Z","last_seen":"2026-03-09T15:04:44.284571Z","times_seen":21,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/main-RTC5AYOI.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /main-RTC5AYOI.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zg1QQWCdTfWAWwhJ6T8EuSc8u5X6Yxu%2Fym28pt9%2FQNiFEmkpZLaSpBN%2Fxr07b4P1OISaEeUGU96Cme2rkxZPvStaHcoS7YMWVu6kVnPRIiSDZpDKCP4Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bad9d1527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14599,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14598)","md5":"d5bdefbf240e7399f2fee1bd069cadf8","sha1":"41d8a4b1cbf80198e2eb30c26c46dc60ebef2f88","sha256":"700c36e331514e4736dd9906a2dec768b16f4caca062edd32e82ef97c8586b2f","sha512":"e4f6805b3db47a3a8a557660d974bb3762da61c4a90cb826bd929878d674150f6096f3868397c2ad576d1150a8cc458e171f116efceb69881ebaff507eca00bf","ssdeep":"384:2Hrbq4wKTtFiNU/OdA7oMEHOHHWNhLQ7N27g:2e4wKTtFiNU/kAwmQU","tlshash":"0262d65a9821703b47a8d87bd8b5c250d22309820729c57ce19e9ea571b4d8cf3beb7d","first_seen":"2026-03-02T21:06:53.21628Z","last_seen":"2026-03-09T15:04:44.346246Z","times_seen":17,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://area.promoriongroup.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 21:08:09 GMT\r\nexpires: Tue, 02 Mar 2027 21:08:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 193\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-29T18:14:32.801995Z","times_seen":949425,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":86,"dns":1,"connect":8,"send":0,"wait":9,"receive":10,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-MIXCASSG.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-MIXCASSG.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDa7Zcrn52TmIGyO3jn%2FbYScPPUV5uRA1EM78iBDXS1P68lK04kPOplCl82BhieEORMwsH4VYPEvHPxmtWZRGYiY34238%2BtGDbLnF6OUBgsgm7I1ORkU\"}]}\r\netag: W/\"698a33f2-187\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364bbebb2527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":391,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (390)","md5":"5872881ce2002cd93df0ba4f18fc3afc","sha1":"de6c0a26c8b18202a9b559600a214551fdf76cc2","sha256":"1b5e72c9749d3286a8dac45684dae53fcf55bc8427b4e00e988d8f6dab573a6c","sha512":"8a47955241ad9dcfb5bddbbfd1d914f2008a9a8275cd46d85e4560d410f906001c4a683eed8f1d7958444fa287c286153b44a7d4c741711218ea13eaf38d80f2","ssdeep":"","tlshash":"e9e02b1ed5609275056dd8f495007621492694aa835782b6900c0e285bb98c7615ff0a","first_seen":"2026-01-24T12:47:21.320236Z","last_seen":"2026-03-09T15:04:44.341877Z","times_seen":21,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-C6I5ENFS.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-C6I5ENFS.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gR2xo4Szb%2F5i54QDJOxEgZmiWJw68YadmW8Z9eeCjes96qWl%2B18Z%2BrHjtQ823bAq9ZEpiybFgOI40EALQL8xHx0mWCg%2FYJh3C9zK%2BbjuLdVGFcX3y5nm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbfbcc527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1227)","md5":"35e2f7bfb543ef7001bc54203b44ca6b","sha1":"c68c2922869d396e8dfe95102f79958a58baa297","sha256":"489f53d40dc2a87a2e895dbe5df7789db0810ac66612419e472f45ca2de49cd7","sha512":"7f458c882719ed1773eb5db53d11c571f0026d01a8cd48499dc56e46d61e6309acbcd97e434691d08ee5943d170a988eb0d14c7c43f7f1a8605ea03c0162a19f","ssdeep":"","tlshash":"f52124f6b002f1771288d4aaa8f28a432a5260d23337b17c314d0ccbf5a9d4d5a57b35","first_seen":"2026-01-24T12:47:21.333783Z","last_seen":"2026-03-09T15:04:44.298135Z","times_seen":21,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-XO7XCJP3.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-XO7XCJP3.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHK6XLh3Mdtqhd7wx%2FnxWCxHOP9%2B6ysdxlvR7acbafC79IrXZQEB3PqNCSMBkx43LIcorDY7GEXaIof%2FSPS%2BjRjtTBTYjOSR4%2FO1l%2F2%2F6XzRqPuBI07%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc6cd4527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29304,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (29303)","md5":"6c439224db9e71646dea8eca2727e090","sha1":"e7f97f40cc6b70a8976820fa679ac11d669ede38","sha256":"9bff3548db6d113c7d3843a2233a864fb8258772f3481182e4dc6c5ce4d5bdfe","sha512":"68a82a23d392312fec7537be88cd37184b97a50a688025095e80f63b048d999269aa788b86d497614a2aaaa69966ca95bc2761a5bcda61b468ba85c135b16b61","ssdeep":"384:tHJHKyMs25tMnse/h5E478ALQNlbTOChS2vsovYpUg+Er2eBpWHwwCoIzAT/6B2:/4sNc4J+Q1uwwYzg/6B2","tlshash":"a9d2d9897242f11647d9c3a9c07b3467f13a64c8584b0c6cb16ee9da6c74e4b52fbbb0","first_seen":"2026-01-16T09:25:21.147258Z","last_seen":"2026-03-09T15:04:44.304854Z","times_seen":22,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-JFXPK6SC.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-JFXPK6SC.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-PC6T3RFO.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaM%2Fcs3Jdfx20FzkKrVpEJdUno4ikhy17SY9NAZFUnzcWQPMfUawdG4ntfBF%2FwuD3ME4gE6ol3O8klP67lvWbLCDaK73F7rJ%2BkCdGS2p%2BPV7A25MQBEF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c6d80b527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25983,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (25913)","md5":"d125f9a7ae55a92199c1389014e49888","sha1":"2a27716d58fea806096020c0bbd3907f38799491","sha256":"cdf56401b9607c06f5a3e96a0b0ecc983f4280f1dcfa92c5861f7cefa41f4fc3","sha512":"640059585e75629f1be72fc9bc09a6c2c0d92f750db97f43d78f2bbc564a715cb4c80db4c6dc4be623e4c35f65f6f7d828861223641635ac8c29b5c328dd4f03","ssdeep":"384:Th27g7uESi0OK3qbeqSX0uOaQHD+QmQRQs2trXmyX2xZ3opi1s2xZz:F/vebPGxFBxh","tlshash":"ebc2419b9e0125fa3c3752954960960a9afdd8c09b001fbeb0c09c6b4ddf9d6a13f93d","first_seen":"2026-01-16T09:25:21.171823Z","last_seen":"2026-03-09T15:04:44.354337Z","times_seen":22,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/a/crm/api/platform/1.0/data/info","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /a/crm/api/platform/1.0/data/info HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://area.promoriongroup.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:23 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Range\r\naccess-control-max-age: 1728000\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltbkVnNJY1K%2FtQlJ6nHnu03qxOz3ey%2B7N9Jou6BSBxyvFD3fSJ1SXAVGLPXxplT30yHzwjnYMOcDDjEL5iFJRp%2F6KCeBb9h8I5SvtJk7RLuryzcXegqg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c39a47527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4cae31c80176e75755ef0c90ea99e73d","sha1":"9977f8e3d70063ab325b2791764df82a04add117","sha256":"f2ad4bd9d16aac598fb790d38e5b8c6c9a009603915a010fc3e87214d770a079","sha512":"7778697815db99bc9ddf071a1fd44714ea6777c2cd63ff1965ffcc3a04a978d4f99cc20d48ae470e8a6247fa62c012c1a0e6efdd95346730958f39fa8111ab6e","ssdeep":"","tlshash":"8a2126ee6364803ec3c042e02b8528db8b3e2117de16ed59b82f94906538c66a03663f","first_seen":"2026-03-02T21:11:50.198657Z","last_seen":"2026-03-02T21:11:50.198657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-VPD63ZPB.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-VPD63ZPB.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-PC6T3RFO.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fycy82RE89j%2BSWWXkAYTRkm0XAm08xOtd%2BP8IJF%2FhY%2B577%2BDZ2jVR8B9zpT8hNlZhyAolsbXcsYkd4c%2BhR4%2FR4F%2FKvPD7HFyP3mkbhEbcCJXT%2FW%2Fkj%2Fv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c6cffc527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1537)","md5":"158b0110d3aff080063be7caee7f9501","sha1":"55ebdf2cae620c14e3bdea3e51e205a8589606ae","sha256":"f1eb9f03939faa8eb0e91128e175da651e28ff164e9e4dd0f3d8b5f9790b2fcc","sha512":"43b1835adf9dc5f1589cb0b79d07e50d0d5e49176bab4aeb79bec01e51caeee14d7567d9dcb8ce4c54f617f6a7ed362339f0b47dc33d681f54b6425589717ad2","ssdeep":"","tlshash":"c4311144b441b1f947e7d0f5a81015711399a66772bdc39962cc04605fb6e82cf75be2","first_seen":"2026-01-24T12:47:21.359517Z","last_seen":"2026-03-09T15:04:44.343723Z","times_seen":21,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-LXM37KQF.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-LXM37KQF.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ACthgIh3GzBk0jSQYGjWFFhAI5IKuiI9y49V3OXS4ik4aS8ATVmWlI8fV8x2ZueC8FTHxuqSOH%2BRqY9AuxMsqzKgwqQwWM0I1E5%2BbSnz3myfMo%2FRwxVz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbebbf527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48820,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48817)","md5":"c3b3414b3209056013d8094a840cc187","sha1":"2f2cd8c01ecf9a03f0d1fb4bad9fe364890e8b74","sha256":"25c43ed57e6d5d2f327e6d2754fe7f1796e5a22fb3711c8e9171a55484827a0c","sha512":"0e9e6a33e5c8750f11bf81783e9ae7ad0bbdfb1d504bb12950c82dc502e3ba16d76c437d608b6debfd704c3e25536ea31a2c78b4762943211920b57426911edf","ssdeep":"384:mF5EwvUSYnI3COiYlQh8S5v5LMy/WMSleJTfxFFyP2DyDm1MvUVZAJsYmVbxKTmD:q5USSOI8S5BLMyAluzFW2D91i9S","tlshash":"9223a57a73e60863d2ed904948b60612c336af8c2c98144ef65c55edb69fd8d40fbb36","first_seen":"2026-01-24T12:47:21.295117Z","last_seen":"2026-03-09T15:04:44.342539Z","times_seen":21,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-3G7INL42.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-3G7INL42.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiXuIcuFl0hANN4aU8D%2Fqad%2F2XlvcInMWFgkRcxFNcQxu8Xt96WISMqvjPH9naODx2Xnu305LynSHPh7NrSX5aKF5T%2FGtSKM2Xucem73IicCJ5WtTahI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c6f527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102661,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (36334)","md5":"329420ef46507e3ff6d0358d8ec31d90","sha1":"14de87a1e857b83d275eb01c5b6ef0cbe7fae84e","sha256":"fe548cba9dc3d2f6f1cece9716c14cb80952692018e52b542e852f28d8ec9222","sha512":"8c454ed68ac1407fbe02650d8d1ff7c5867bb1e9a6b238bb5797735c9d5a4b3b9c5e655d4311889e4e5c39515c3e4a8102479710b81c2ff75350f21298665024","ssdeep":"1536:9TX868Ju4cr2LdJBv7dTXr5xnh2oexmlLDeSbNtEQz1JiXw:9TxrmdT75xngoexQCSbfE8ww","tlshash":"16a309c6b212762b03d791b9a0fb5403a32955500409006c76fddede9bacf8cb2b7bb5","first_seen":"2026-01-24T12:47:21.317403Z","last_seen":"2026-03-09T15:04:44.279303Z","times_seen":21,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-VQVQXPR5.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-VQVQXPR5.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DNuBo7A7AcnWThOihpNW5fXE3ie%2FFNffPBgPZ0w7b0YIVN%2FWPbWcnS6kT01F3SsV004HDYiKzksxW4lrOzvs2pIcTDQ5vsn0nJC%2FkOP%2BqZbkgNgbhiGx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc0c09527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1230,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1161)","md5":"9735363f42979fc0644ff5653af16584","sha1":"fb76a99e51cef30e2948c74733fa758d6fead71b","sha256":"ae45846597e9b85264406d6168c5b6b43650b0077dea13ff0ad280f17b526ae8","sha512":"2dab7c068c967e938e54e7c9362a218281f839c86cfd7ca9fa54d007969476b29fe1df0d2c44a4bc9c0a69ece65226c4536ea9758067a7b93ce41fb1fc146b0b","ssdeep":"","tlshash":"2a2112c76833b12b882aacb3c7c2922896561561c59352c7f2425f2795de9dc632cf9c","first_seen":"2026-01-16T09:25:21.146365Z","last_seen":"2026-03-09T15:04:44.263438Z","times_seen":22,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-CCSROYAA.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-CCSROYAA.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wqa%2FY1qKPrDrlc3tiA%2FvC2i94mLj5UGzrlriDYYTEQuGjbHrBcILJ8dOybJHWKp74Yo%2B5VVSEU7u4tAGq75HJg%2Fv%2F6VesIEihnPcwkbPpWky89bD7UmZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c6d527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17115,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17114)","md5":"8c7b2ef5a59c633a0e7d013c254412b3","sha1":"274d20e3f3f4f04d3278e468fc1c3e35680af9f3","sha256":"c52b49dffade50432ae168095f1596e16bd171b55b81051b0cf3d64f9603525e","sha512":"a2d01fb7dd127c4b952d1d9695454a8411cc71323ba81d5b116ce07b3ee807757b985f9301ce56f5da6111c0e5229526f55935c1e0901ef6294c5a237077c869","ssdeep":"384:11rzlPnZHLIJCJbdZDh84SBy8pX2+hzOYyiiPhdISQwymRfuEC5DncEiyQpgdpH1:rrzlm6hK2fdPhewyWf6h/iyQpWpH1","tlshash":"1f72b6c971d7b00657a3f168412f9106b23f9965348e892df92ac8e23d7884dd13bf78","first_seen":"2025-12-12T21:17:37.551446Z","last_seen":"2026-03-09T15:04:44.267223Z","times_seen":26,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-WRWXI3SN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-WRWXI3SN.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKD6yo6sUSMIM0vGOgPlJeCeiNQmgZQlbjQQu3oNDjya9f5kcm0Ue4TMk00f6hjxd8ZLuL5JtbES3tVZBNRI%2FJxslcdiX7QTLm6F%2FqS6%2Frohujrqu7Zs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c72527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3980,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3979)","md5":"58cdd57011a194468f709cfcfc27c9af","sha1":"5e1b03fd5ee29636f702a29b3035ba71954cb420","sha256":"0a6baddc23406a9a450d9af03969d18aad9354004fc6faaccdfe07acd52cdd2d","sha512":"18e1d4adfd81f736be0ab8356609c30575da58c38514fd92f9550ad03e3938ba9826eb69d08b49cfd90021f407a39ee1c496fe0d3b1c9d5d4ae2df16b30e8153","ssdeep":"","tlshash":"b6810dc5126e142467d6d468467c0e13703034847b5b836cbea9f9efea1dc9c78b78ba","first_seen":"2025-06-05T16:40:44.115963Z","last_seen":"2026-07-20T22:39:45.02126Z","times_seen":306,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-ZSZ6IXMM.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-ZSZ6IXMM.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2BiwaHq2lsksdMWIXwnOGJHIwvPUflWK2NZ4Bvd79Mlhg1%2FuHExDXJKrMqEHcAs4LU1Ikn0qwxlScDwGRfjx%2F0KrUN7C9N39p7NME6ChOP6nt77CKWLg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c8d527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51503,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (31511)","md5":"2186bb088b7a6dba824486936e13ccbc","sha1":"ebfbc133a7e9782bf19e987557bddd22bf94a1e5","sha256":"f3ff9411c710634b2348af6a0c311a5bc3d85f6d4c43e00d70b7c630ae3f7b12","sha512":"b0fe1314215cd9bb2422f7a92d0aa7c553410f9824166f165706f6db101f15c516f776353f58731564977ca429685358d080f4357d7b422d622a9d063ec03b5b","ssdeep":"768:Pnoc0yATUeZvnfj4VGdUjLwlJyQiw/d+Lyc7Kkto7RoLARvBtbti2O2n5blpm1kA:PerT+gJyQRtbti2O2f4SZk","tlshash":"dd33b76833046812c3cee11fd4b7050ba33a6942ca0b415c76ac9def5a5df89a1b7bf5","first_seen":"2026-01-16T09:25:21.170026Z","last_seen":"2026-03-09T15:04:44.310578Z","times_seen":22,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-NVGGWRZD.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-NVGGWRZD.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHiv0B1IJhKTW2I3JUAi5EJSNIHUDkT3rG5x%2FKZTySjm%2FQXcJWVRIMbGkO3TY0OvvlvzLrmy8sylOyi7irqq1EspZ9dfzxE6Phe5HI0BIG88WzhdPA9J\"}]}\r\netag: W/\"698a33f2-ff\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364bbdb9e527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"5fdfc8cb3eb03233e6160d65a8fd6c01","sha1":"e8b0f6f5ae3370fd6e769d38a2f326ed4acf0cec","sha256":"adb90714691ec4618ed53378ba2cd316074a582a49aa537c6e39fb12b202771a","sha512":"1ddbac2f72dea7c588cefcb0502bda1887b17a264c162a425e4cd6811af2e6ad86256d87e13d646de0a92cd98c9179e1c8e7fa6179c9ce9a70ef278eb2f865fd","ssdeep":"","tlshash":"29d02e3e8041a3bc444e88be9044a6210222842b23ad13e0408f8aa803600d3c37ea0b","first_seen":"2026-01-16T09:25:21.168338Z","last_seen":"2026-03-09T15:04:44.351589Z","times_seen":22,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-QSPLAEIY.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-QSPLAEIY.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3O5%2B9tevqQ%2Fm9ESd%2FgUpc4GNzWjlo3JHZMguk2MN7Al3QgL33LLvLu3MYf3VtJU9Uzt3aWT49F79vPjwU6JWdlUA12DYwlCBKP%2BIhOnp%2FFaoU1pMs3h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbebba527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1379)","md5":"93c0de251ca505c2af873170f77f2706","sha1":"e310a4b2bead1be929cc8b7efe82b67b48929eda","sha256":"3c6c091c2171ffee1e4b3bd34fa262ae6c80d30d75d4ae75acbca22a98db0a7b","sha512":"4817f146265e20aba40de2039b839e0da7b3d20ae2bcd1544dc2ce988bdaaf3a2db90e42a2f8e5c093b60c34911b66a8a4ad76a88e45bdfe60f859e707e95b33","ssdeep":"","tlshash":"9a21c15f9480157a418cc8ddc49aae5923593ac043c891bdfcbadcc606e4ccd92b3bf2","first_seen":"2026-01-24T12:47:21.332883Z","last_seen":"2026-03-09T15:04:44.288665Z","times_seen":21,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-J23YWZDE.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-J23YWZDE.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BuIQmTxX%2B%2Bkf8hzVAdHl4War3y5lI1qyEoaIcuIjOD4fFld73axYtyPDHr73LAqx34XIaRH9bNplZdA7sKlPq58FbNMwH4G84uuB%2FY8uhXXK7scKp8L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c6b527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4241,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4172)","md5":"316d5eea0e26e21597b8224d3e6e6c15","sha1":"db447e00c85553e4e3cf1336fdd41fc46b266ed4","sha256":"c046c92d47ffd3ce5434cfd3543d8a7ecb587885036065b1208be3a2ca50356c","sha512":"e1a38bbabf64de4093190e2be7da2cecbb98c8dac96dac641a79dcde2f649e24ecb1c8bee5ec8b19ee75ce1dd1241ad1ede0e1166587e4b70da597fa04d554bc","ssdeep":"96:3xRjuWgQLQQ4rQcnzG/vecEUJu2QcNcSBQkJg:iWg7tpzM7t8oC","tlshash":"a591429b999136e43d7be298696d886edd2715a057708f7260d8c8278dff8eb011f01c","first_seen":"2026-01-16T09:25:21.183445Z","last_seen":"2026-03-09T15:04:44.265311Z","times_seen":22,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-O2XAYGEN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-O2XAYGEN.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TYmb1PgknqeTs%2BFznvl5DtCTsqYWkF30yg%2FREM2rpFrnFx0grkFaTMlmUj8XgxT6Uz6KDVyCYDE3Ot1JnSSNlf%2B8ieoQc7BNNy2ANWXbqUBxsvzGRtm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc6ccb527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22573)","md5":"628c6abf6bd4eb95cd92580479907ec3","sha1":"c6d9cb5943731abfdf5c40986d1235f34a6bf857","sha256":"184f0a19c44992bf83ad25031228691b7d6b16a96e8cf625bd8d3740c6bc8940","sha512":"16d73d405f289502bbbe7c3af1c68daafad992ce9b4641178b55df3e4957de14a0f6c7c2f2d82148e79e7daa3c2eb90dcac72975161d3ba9da6ddd28ef7dbb76","ssdeep":"768:hO99J8dzkBO6gM0VXfZeFHAohFFK8s1PEY1HgCpsJhvx3ZA8:h29J8dzkBKM0VXfZeFHAohFFK8s1BgC+","tlshash":"b2f2d6aa3215b63747cd911a74ba410bf71a64d4440a04acf5acccef7e2cdc962b6f78","first_seen":"2026-01-16T09:25:21.142178Z","last_seen":"2026-03-09T15:04:44.353486Z","times_seen":22,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-U5KREEGP.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-U5KREEGP.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoNZ4kjaKDEERbXXFLQQuQ%2BpRTGl7%2B3tWvS1hwagaPo%2FRGgnC%2BB4IgKZ%2FeiknkmFUnAW96y59Pr3VUC%2FI%2BisdcSTjCSt2s5BipvC7Pusn3OGJx4CfLr6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbebae527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1263,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1262)","md5":"e62e6df1b529c928c65302149fdc5e78","sha1":"90a07bda4d600461bf477386ae235b495dbd12a4","sha256":"0a3f94007bf7698b0c569e1b7ed1b3ae404d206e4e79382fdd90e75155efe05f","sha512":"37b9fa1c85e3b81e769dee5f936740d7232a618c49b9f0193f847fc62dad5fb92bebe20c20c5d93cedfc7cd2b7ea915b37e3f7645a940b47cefd1bcd81b4bddf","ssdeep":"","tlshash":"b221052d9950b0bb178dd8f5e000a921536769e9037e93f6524c0d245be66cbceaff23","first_seen":"2026-01-24T12:47:21.35584Z","last_seen":"2026-03-09T15:04:44.352295Z","times_seen":21,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-KXR35LCN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-KXR35LCN.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zu%2FvawtBIMcDu5%2BXp%2BolfKLlUJ3IigcGipf2XH9ykv4gtE2hgVDXrMuif%2Fk8Y0tI7nnbKwL4ZZgOvdQXFP54bL9ZFRjZyurrdDxf0siKYqaQY4Fa0fVe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbfbd3527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1617)","md5":"ec02469cd47e0b09afe8da2299c41332","sha1":"598eec6ac26070a7431507a6806899c50549144c","sha256":"74c33f6e6de1243436faa544c727bb734f1e0f2ea4b76b848b5a57f163082f24","sha512":"65ed6fe748c59087c992c1974a029692398263b3524be063b9cc2fe5c30316aba26eb45a7fa3ef5bb1b1eb4fe07513d9aa4b3df7be3069a55ddbcf2ef9dd9920","ssdeep":"","tlshash":"2931618f8260fdb967a9dc9f48940500002024db46c6e1ed7b254cdc2ee5c085bbf7b6","first_seen":"2026-01-16T09:25:21.152157Z","last_seen":"2026-03-09T15:04:44.334618Z","times_seen":22,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-7VLEQCBM.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-7VLEQCBM.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2gxscZw7ggBit7S4d5lXJxb6VP3feyvtfT0GJ4kDyJkr2qSARde2aYIi%2BReacmWUrlR8LiX6IfPOyE3hJukgSj5txxVaa72cOj3J5r1kO%2FwE%2FxyNS4w\"}]}\r\netag: W/\"698a33f2-3bc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364bc3c64527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":956,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (955)","md5":"d643532f35e5a1eadf9b4b16e0a0d997","sha1":"e4483728d7675126f00f13907c6dd4b2ba4e968e","sha256":"73062ce747bd0d160e2f006005f4e31090c1bb5e73da12b08bbc60297ec78f23","sha512":"9af161ae1b528d98a089fccf8c65732a26ac59190fbeeb4c2d7a424f45956a26197dd2262e9c58f64a6637fd002637ae4f64ce728422e06085c283ebd39b475c","ssdeep":"","tlshash":"de11ba1b600061be2208cdb0d8be0b1282341e4a052ad7fcb525bdee5ad8ccc897a637","first_seen":"2026-01-24T12:47:21.321155Z","last_seen":"2026-03-09T15:04:44.356838Z","times_seen":21,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UXZW2ZYK.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-UXZW2ZYK.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Asp%2B%2FwghGcRBHYjLMT3lI9HcEM7icsJgvNlXjJ0jCGXJjs5ptjoM42ndS9naGAoH7FCHDmtBXCgy8mZb05tr9MlQnWAuYBPD7hW4wdPi9H1QtozX4WBb\"}]}\r\netag: W/\"698a33f2-56\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c81527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"4075007db8ab711d6e931da866ce84d0","sha1":"c460c2e97432b92c28d2af1865c7ce954c543d0a","sha256":"3d64e3e6f22aaaf0ab5954a45bd40a34117b7ab4fde47287aa05097772f3cdba","sha512":"81319efc456bbaf890340dd54fe37a4c34088087aa6cdbe092ca8a1ffa55806e757b8cd6bd0fc0f366e15c7fea7973e19630eb37affc04ea1567eed64802f248","ssdeep":"","tlshash":"82a0121a4851a6b004470cd50044c746411614e513dc97f405045504026d2c3912e903","first_seen":"2026-01-16T09:25:21.191484Z","last_seen":"2026-03-09T15:04:44.300536Z","times_seen":22,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-RVSN6VOA.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-RVSN6VOA.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcafFZzRzKav%2B4l%2BGa3jDuLj31Xn2%2F31qLAGSBEqns3lHnqb9HcDw71O6l8pA6QXHjo0qy%2BMVcrTH3G%2FsR7RIHJi2ZZBxCnhcaAsclzf8iTNJic0W49G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc5ca3527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1342,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1341)","md5":"8b52cb1c62ad587c9e4a17dfad09d42e","sha1":"b51d56fd1e9e7c9c934c2edbbcfd71ea6e6791d9","sha256":"eebaa9f12d6989a27fd40862e7387b254d51341451bbf5b939ccf7c0485e03c9","sha512":"efba5b885ca554336e7d1c7665cd89506169766cac1008b754bd323168e3e47cd27b6d19955dff78403aaa444a66d6bfba9d92e9444db5a35b968ab75090d318","ssdeep":"","tlshash":"8d2133db6746697d5389d068c0760645924a0c6813efc4d3d1839d5177bc20b07b6bc6","first_seen":"2026-01-16T09:25:21.155165Z","last_seen":"2026-03-09T15:04:44.270966Z","times_seen":22,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UUMPDUXP.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-UUMPDUXP.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-6MXBTSEY.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SFuz2Tr7F3pu5JthzD48F9JO%2BUJc6NSUhfrGrGsC7spHB%2FbwdaZAWgIbBKdV9OLN3a4JC1IVfQyZURxvjexsij0pzbbtDJbdDtv97tBNKyg75fqpLo%2F8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c87afd527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5356,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5355)","md5":"675546d0e73ee3e0a1fb265cf99f02e8","sha1":"0fd62079a0215bdfd44db8438d1a56de08d5f948","sha256":"318e3f7cbe02d788919a28c965b0c51af5170f137424869039f46c7667ddba5b","sha512":"ffc3e8079b2e040c783ced08fa15af9f8268fd94cf49113e86ee62df55710236a42c4d67039914999b902159c4388e1b9541bd0ff8bae1295c8ff0443daf5c01","ssdeep":"96:nNK4WPOn5W0UdsOPWD2iARTqKDf9wPf9wb9N0wQEycIzLlOP5h0xxN7:NFWP2SsOPWD2iADfmPfmbww5y9wP5h0Z","tlshash":"a3b1fa626060257f264ac4954843e1112368d5da832de3c9f766cf2862f4dca967ff3f","first_seen":"2026-01-24T12:47:21.360386Z","last_seen":"2026-03-09T15:04:44.360416Z","times_seen":21,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/styles-ATZBST5B.css","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /styles-ATZBST5B.css HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVpm6ZrZcKKYed4%2F6E%2FwSa2i7kFxon%2FDG1nDkEsKLgfAGYhlBPdnZiMBehpS3RECBmjtcdlV3nT4oOrXHq3trzV4x%2F2CbM1uVjet7qnIG0RY4OMlWlPO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bad9e2527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113897,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e6bc3148a392fad0884c9f7e415bd3ec","sha1":"0493fa83d6180cf9f1228a1835db810d7e1e7034","sha256":"e554dde77a90e524481660430bfaf398f1e7bba21686b1a0840d271ebd1a9bda","sha512":"9276ea75ba2d7197196d61d235e583a64cdf068ad8d53e81bfab6e943b1d70537920ee7deb1cd1e4d4eff40723d22e97854adab7444a6f21463d583c8fb6848b","ssdeep":"768:/yL+wlx72k4BRh4RNCyJ2b2XBgXCZAwgn6OjyskeVQIlxbk+KEKPV7/C:aL+8wTh4RNCEAMAwgnDvNQIA+AV7q","tlshash":"56b34241e180617fba170bb3341b7728bf869ec2da003f75bb0658a991d8cad315f697","first_seen":"2026-01-24T12:47:21.299432Z","last_seen":"2026-03-09T15:04:44.339802Z","times_seen":21,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-XYDKJYTP.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-XYDKJYTP.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsWSPfBBOmWxySmNY3xw2yY4Rdogo8k53%2FhQX5%2BwlhqNZk8WP%2BK11RYY82h2siTuEQrDZfuJXywkOdjG6VjaHabMnO55zSLzb5xEQaCtEm%2BrE1yQ3icO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c88527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30263,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15087)","md5":"390737e1352ea99af7626fb7d1166a1f","sha1":"52d0912d348d0d112c007a178341b4fe94638792","sha256":"75cde31bca594470385983bbb13002d1ff3a447d45cd24bb0ddc77a18e96f123","sha512":"2d7ef40a11d9e2de48d1abdd4c74057aa9a819a8cc83d1265b6dddd01dd1d860f86dc26d9241264371667a0362da5aea4fdbaa76e1dfbfbf3c60e14e21847cab","ssdeep":"768:C8IMuSKBWPJoIdMKBZ8+oU6i/Y7pYJKtZTe/iKAo:CrMGBz+oU6i/AWiKAo","tlshash":"b1d2d6a9b3197532aedf597984360817db909884900b02bdb15cccee46edd8d33bbb71","first_seen":"2026-01-16T09:25:21.154053Z","last_seen":"2026-03-09T15:04:44.269072Z","times_seen":22,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/assets/i18n/en.json","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /assets/i18n/en.json HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://area.promoriongroup.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:23 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 09 Feb 2026 19:18:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHk56rP3piN91TSYQOGsjKwgQ2sSTyF5QtGm%2F4wLyvF4NCbmYdE1l0ALISv5C%2BPEIxI6XxaU0j%2B8z9O6%2F%2BeyneiFqpQTchhiKEyaQ1V5QbdHXrbZONKg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c4ac1a527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31246,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ad9c204085b90c4c66d6789f2a40f64d","sha1":"b4549679fe9c3735b86422b87cb2313c5a1d31aa","sha256":"a9f0b611c2e66e13d02406a1615179c9f1b8fdb171c965fe46f25cdca746938a","sha512":"64e548439a6382b7410d00cb6baa0e2cd6c3a8372d36535bda892a47b003238cd056ad5d55b5c3a60519e09e01241cbc7be23f2e33e61b2ccf5b2ec2a5d8a15d","ssdeep":"768:+RsZDiyJwWljD8AP21oRYSSMOPJ1KXm6Qz50S:OyIANSMOPJ1KJS","tlshash":"6fe2d505db040f8ba9c24968b09e1e46762a02774f28359cb769c02c2fdf64f51bb9df","first_seen":"2026-01-24T12:47:21.324606Z","last_seen":"2026-03-09T15:04:44.330212Z","times_seen":21,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/assets/img/images/laptop-light.png","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /assets/img/images/laptop-light.png HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/auth/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 1137309\r\nlast-modified: Mon, 09 Feb 2026 19:18:53 GMT\r\netag: \"698a331d-115a9d\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZ76XAzmHEj9R%2F4YmwAPRBcOkE0KKMHcbvXmhkwl1jO4rBILPJLN2p5MU%2FANxLiCT9wYRCRrhZ9N%2B7ziILgaKDY1A0ZKgVMJerPMou53qN5IxUOi8DCp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364ca4e8a527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1137309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1874 x 1356, 8-bit/color RGBA, non-interlaced","md5":"f456737b8c0de17c0a7384a2e1b87928","sha1":"df44904d8848e4b77562c14df0b78bbeda813269","sha256":"506cf5e182a41d85cd09d323194217bd055288be48465d991d4e7db1a9b72577","sha512":"0ab0b2e8db55cb30fddd5f76be3fdae109f9caf8253c9a4555cb8ba3025267c88e17cb06cef1184df689a9a493e75e6187f4de98f2edf0c1e933622e685a4548","ssdeep":"24576:TGhIQj0AXk73qHNTl1M7r8nBkF/EDDQ9e/2Rv9r6epsgK:TGqNAXYatTlGXwmF/EDDQ9eivZ6AsgK","tlshash":"7b2533d369ab0e0be6685a75464bf4cd21fb909eb455036cd70a007678fb1e893f4b83","first_seen":"2025-12-12T21:17:37.509442Z","last_seen":"2026-07-24T08:59:44.154502Z","times_seen":101,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://area.promoriongroup.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 21:08:09 GMT\r\nexpires: Tue, 02 Mar 2027 21:08:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 195\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-29T18:14:32.801995Z","times_seen":949425,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UP4GP3NB.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-UP4GP3NB.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqrR94OfdObHDnnvPOH2sNLtgGemphSioIdIoUUfafcTVMCUqkrc405CQYf3gLsJMyDBopGFNophaQS6%2FaWIHq8FBN35uTCjV42nY1T0rBkIevjX3%2BG%2F\"}]}\r\netag: W/\"698a33f2-306\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364bbfbde527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (773)","md5":"7852454e422839d1e740ac26dab74e3b","sha1":"c6b20bbc6c17eab838a1fd3e028b9d4a9f9b3f73","sha256":"5ce166bdcf09f46b940d58813540be861633981288dc971b6187058a26ef7b01","sha512":"860d2b490f09a2c57010ff0a528ea8a43747c655961c6774a4c336ca253457052a7632ef5bc0181be07f052f5c5cdc6dc854087e1bd599ec791d3079699b29ff","ssdeep":"","tlshash":"e701b11f219ba27855d5a45c20d57415413854c2327dc0ad3927ec857cbdd4823b9afb","first_seen":"2026-01-16T09:25:21.133549Z","last_seen":"2026-03-09T15:04:44.306906Z","times_seen":22,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-JGW6FFOW.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-JGW6FFOW.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJATOoLTZFLwQqfx6mCtVv55mkV3BCFo0H3XWswbgLyfhXCehEbrWfjte8zQkv2Cc7l5mDaOMFrYdWN6Wl4wHPKrFL06G%2FFEt%2Bud%2FLiLM%2FDrZOtMNGoW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc0be6527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5603,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5602)","md5":"004733fe55d1ed3c66ba893199f384bd","sha1":"e818fb7a0ffe8dd551db7f813e066c29df2ae1b7","sha256":"f53f13ca0cb317d4d51a8139237f2a49dc599ede4038ec70d85d9bb9313178b3","sha512":"5e77f2cacd0540ae8f535871896038208ca6d10617abca4187812961e77353c6e7fbbb8666a952230941e150866974497a94e86be19aafd6af9d010735d34fbc","ssdeep":"96:ndYImTS3BxFjFjIvgY3g9hd3VcWwc2XL+DAFfrUlPiw7/pdjv3:ezSjiD3qhd3mWwbKDAFoX7/pdjf","tlshash":"b2c142d732c3b6058b5d105444764106f31aa9fa1c8e492efeb945cb785cc4a92bdff8","first_seen":"2026-01-16T09:25:21.134426Z","last_seen":"2026-03-09T15:04:44.283159Z","times_seen":22,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-ZABQJ47X.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-ZABQJ47X.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Tuu086jp0Pk8%2Finsh92A8azW2izst5Spi0jWi41jfDva6QBeTYUy4RV%2FoWR9wy7HAGzZFPBajbq8T6vUUuAQC30T1c30aVc3l27%2FVS11mirBDvP1jzl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc6ccd527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18218)","md5":"0e5a8b53c01cbf41916e9ca9ae43bddf","sha1":"1e20188ebf5fc77ce2372d2334fde0e75fcf2a19","sha256":"c0ca49ea4d32b810913cfeb3768fd49ebdde69bba8a7e946d07a13d01fb9daee","sha512":"841e557b8ade22f744771f17c53f8e47d85f81c622c08936dff6333490742ece6f156f17a9371b893aa9d881da9da59a3424697d87461dd130eaa466f67e1d4f","ssdeep":"768:Gi9iR/wi4HMF1fPDYRThEAXyKxn+HVkCiDhnt+1eAtlJ08mIZG+RkV7yDtZ1Ty5S:5iR4jHMF1fPaOHMQhLNj","tlshash":"88d209997396f9330bc95498c0ba0987f3191495614d882cfd39acfb78a0c89a5f7fb4","first_seen":"2026-01-16T09:25:21.138892Z","last_seen":"2026-03-09T15:04:44.303184Z","times_seen":22,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/assets/img/icons/client-icons/promoriongroup/brand-logo.png","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /assets/img/icons/client-icons/promoriongroup/brand-logo.png HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1712\r\nlast-modified: Mon, 09 Feb 2026 19:18:53 GMT\r\netag: \"698a331d-6b0\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3Jh90yg5PF8UV7OMMLXCJe2sNUAnsqL2nvgI1Ly6D0uAzFM3bS7%2B%2BaAngt1aXpgOCgjfyhAryluUvSQeU15QMtvioYjTKctpWemZiotsG7johQQZoz5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c60e72527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"7aae4c3f685840be281f3d1934b095e6","sha1":"d6f05fa9fdc4f378fcd66c0ee215e994a86801fa","sha256":"5e9baf9697fed541090f144544dda0114aaea75cffd5186f67a61bf35cb80636","sha512":"c42a5b11b3e2a1df98729b9df9af7bd5a4f1dc75e4c09b184e6f2a1f5b06ed9d167a355e3f7b98cdf8709610dcb1bca42435fac8290f318bec7020f63d3b41fe","ssdeep":"","tlshash":"08311af22671bf3cea4e01774b4536cfcd49069b6607c16e67cd20262717ac58dc06a7","first_seen":"2026-03-02T21:11:50.232833Z","last_seen":"2026-07-20T02:03:36.931523Z","times_seen":4,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/a/assets/api/conversions/USD,CAD,EUR,AUD,GBP,NZD,TRY","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /a/assets/api/conversions/USD,CAD,EUR,AUD,GBP,NZD,TRY HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:23 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BdClMJygAb8vZELZWxDWx%2BZ5lgsgflFbfwr9ZTPYZi8lDosluqPSmZdDbrYxrncBY%2BXh9p0yQRbNY6je5ayXI%2FiXktf8syK3HXihey1uyAq%2BdJbm%2Bx%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c66f67527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294658,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2f328a5d4144c7f57dbe07f3c8be1ea8","sha1":"6ea1679f08f8c318d4699dfbb6e1d433ce2696d0","sha256":"23107fd825cdb400a198adc2d1361abfbb1441c40788cf95b0533bda741f41fb","sha512":"0eda86b4604851f91eeef5b0771a0e099a188bbfebbb22cb74a595701efbf8d047720bac2bd02fd1ac569d1e9e2559fad4092d8e3f9f94b0b336188971fe2bbe","ssdeep":"1536:31YE0x+bfX4YdF2mATyjq+Mhy5mqa1iB2m8nOhJN6I1:31pbpFBjp5pBxhN","tlshash":"ef54ba02339a5d904eb93f0cea4f77f2eaf7752095d432a891400347315b69bbad876e","first_seen":"2026-02-14T04:42:17.996889Z","last_seen":"2026-03-06T03:26:44.150782Z","times_seen":17,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-QZ5M56TN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-QZ5M56TN.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-PC6T3RFO.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bh5wBdhP%2F4nG96mVvdOZUv9vDKrRMadTJQ9dSwH7mJwfuYKgNk1%2FuEWeJ2nphmEAhVEdGUHhIhxbdamBObMJl%2BRoefzXtQraLO8lLJtbtbXEifQD8YR6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c7b975527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16368,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (16367)","md5":"67514d656dce09c5c6cc6d6f8cff07be","sha1":"dd413e94eaf5b53c2635a0575a6a5cbf05a142c4","sha256":"544c6c8875525b91952dd961a406381e8961584b102f4b2b958f523c22c9204e","sha512":"b95ef830a5fd427d3bedd343794f9a352910b1481d563430369fd600282a0c6427537b5017ad9a957ee2c174463068cdd3ef38733feab613c022fd0ce1881307","ssdeep":"192:3R3Mjxz+98txiI2re3pqAf/fkVLodhtIWpGEnwdQhGMy2CG3QiUJSZam81WY:3R3akrIqErXJyKtUJSk","tlshash":"ff7243b2a770b07db691dc536656bb0c5068c061d211cbf8e71aaa4892c3febd37471e","first_seen":"2026-01-24T12:47:21.29696Z","last_seen":"2026-03-09T15:04:44.286552Z","times_seen":21,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/assets/img/images/laptop-light-low.png","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /assets/img/images/laptop-light-low.png HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/auth/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 103952\r\nlast-modified: Mon, 09 Feb 2026 19:18:53 GMT\r\netag: \"698a331d-19610\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yROq7YtLFO9o4fip5aKjDxXejjOGQZqs599SHo9HHnApWI%2FIylH7L4zOalbWi0hBSnHcehHFR%2BtYN6JFy0qviOXvH%2B%2FI6L5dlG9Ir%2BUjrd0FOM%2B%2BBy%2Fj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364ca4e8e527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 469 x 340, 8-bit/color RGBA, non-interlaced","md5":"e9e582e824b5d51797e87067be0c3d9f","sha1":"18ca675227e5eff618efb9c78a349dd7d79e6310","sha256":"e0363263e190946daedc6ecf8e6ece81282762460e39c07770b461fbc0195c86","sha512":"778c883bacce5e72793e70f9dfc5e5e60be7038f7ea3f22a5c85ed04bf44351a2f02dcd9902bc3fdae78767e9e73a44dd1981c566cce4f7edc7958a9eeb960c8","ssdeep":"1536:leT3gij4OQA8+S1E6964X2H2h4pNYr4pvamO3acvoHjUQyhITWxhd8ythoPOAOLM:lIBVvSRB2Ht+4JK3aJjkhYWxj8zOwuAN","tlshash":"c3a312a9fd965cc1257a1a3286fdaad02b5a13b3c9d2319f52e59d2878fe4f403c0f01","first_seen":"2025-12-12T21:17:37.49084Z","last_seen":"2026-07-24T08:59:44.120124Z","times_seen":101,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UHTAYFYZ.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-UHTAYFYZ.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sx43XyuGE6BQMnLKtigIQ%2F8qeWxPWwS7HFdXjBmhI4xM84CZIcctsgsExYZxPhElbTKW3mIrppiRNbyD0QPZ8O26PmOUgQXUjAV1NxabDB2k%2BiMKL9lW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbfbc1527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"db30916f3c4b3c945469a3a58297bd16","sha1":"490fc002adcd1b4597587a285c2727f866021bb1","sha256":"ca9faf80523587148b089f8e716ba3964feb0879d188ae154036863a76042668","sha512":"5ce25b51bd56bcd1f9967e0589841224fc10187e345e983a98efb1e142247b7624dcf38ef3c8cb185ce551854c8e717d03eb7cc21f53446950e67d2c245d1779","ssdeep":"1536:rETP1BNo06s0Hl6SaNad0Hv/mK6aoUOFh0sQTzo:rETP1BwlInB6aoDF6zo","tlshash":"ca73c6f83382f12687db51a685b54292f23b1dc5244c407cf64cece62886d0996fbfb9","first_seen":"2026-01-16T09:25:21.151312Z","last_seen":"2026-03-09T15:04:44.295355Z","times_seen":22,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-7MQQIFF7.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-7MQQIFF7.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-QZ5M56TN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKMpbf0zTwhay6jLxUbjNfbWLS6c%2BX2VXbx7SeWA7TsyCMP7K%2FDISDajq%2Byqd26eDphWz%2B%2BPLurj6lHrq7xhMG9ZDxTlu3L4b%2FZwcmYpuAVNYai2m0fg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c80a10527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58752,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (34459)","md5":"1b8c9a81c61478be9d41fdf90e00d7b0","sha1":"f130fb3c50d8f973fbd01045fa0d652c8896a2c2","sha256":"ffa64bca959b9dbc49f81e4d1bd170e4a2493d3f0c0b99513331d753ad9e6961","sha512":"45214449be6fe7e30da6c8b4bb1ca940cc1bbf5ba92bc5a0938b84a390838df8dd33af59aa8284daf6a636768711df445e6fb19e3b8ce6e3d676a6920ce7658b","ssdeep":"384:zHW1/61j1jBUNgbEzHCxZy6R7CvSmrjPGbHz9DrwzG3eRvOaQID+QmQRQo2trXCN:z21/Uj1dUU+ixZyUExvBxQRxw37","tlshash":"0c4384465504357d38dab13390a1e2c5eaecd897ca302af6f2c48f9a8bcfbd56137524","first_seen":"2026-01-16T09:25:21.143964Z","last_seen":"2026-03-09T15:04:44.323327Z","times_seen":22,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-6ICS43TQ.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-6ICS43TQ.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZGsi%2Fg%2B%2Fzk%2BC7LCvPtCtnnWzT%2FqPw%2BRe7C2z0vipxL0pkblBn6Q1a6b3ZhukC8lzQD4BJZQ3TNZSMv%2F0SOWj6OQ274rjJpX3gS%2FJl7kD0h9p8xHSEXM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc4c7e527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11189)","md5":"561d83f7a3697635bfe19e09a91295e0","sha1":"1b7aac28b5f61d98d803c15ed0e81e31f666fd05","sha256":"aaf9a84b407eb49320e8fe04a6d198620b0b383948de0d39bcab5cf7b57e8ccd","sha512":"7a1400920730f1d9186c90d93638578ae2e00e2c55fb35aad2dc560230bb57440c6e649e63f2ad54c9e637176aec157fde75a42dabf6cfaffec0f204a8bb2bea","ssdeep":"192:8SBYRVA1V9F9JAXwalI40zo330Qiyou4D98BKkA3B8/dAJHqTG4udfBGHcPWye/t:zjrRE30QddARkb6T1Li","tlshash":"17323fd933ebe52042958616aab10086f23d9cd4983a5c0cb76638d7fc95d2d67afb30","first_seen":"2026-01-16T09:25:21.174225Z","last_seen":"2026-03-09T15:04:44.343149Z","times_seen":22,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-DIBRREDF.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-DIBRREDF.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JkzqeWhCC1WbYzlb5RybUsrhisYum7YRdYkW0YYY8A0LQhYm%2Ff2DJblY5%2BEHdfH7pcac4VvTpXO9%2BC1bml%2FUbC%2Bp5V8KfTjlqwPS8HrDnzYAUnTZ7VtC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc5cb6527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35702,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (24627)","md5":"809e94d8be979e2ae8b525e3ae879d77","sha1":"841d271f600f4f15b1e88df8cf219a9873fd5829","sha256":"36b91499dd379de103a446478f9413346d25e6226a34732eb7109a1a3f0206ce","sha512":"fec2288db3f0ab7eb59681228fa0d51e936912f69d1657932fe00d216cebd8437ebc003c588ddb25b1099df3e0c6d66705ef5208b68739e771051dfb0b7e761a","ssdeep":"768:zZWeqs49tLwLKbKwE4oJih9a9oUNE/JJq:zZWeqscLwLmKwE4oJih9a9oZ/y","tlshash":"cbf2b9d5d100377ebf66b39981a7862abfd02ce88c517660b4459cbe81ded9b200f637","first_seen":"2026-01-16T09:25:21.175192Z","last_seen":"2026-03-09T15:04:44.347633Z","times_seen":22,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/a/crm/api/platform/1.0/data/data","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /a/crm/api/platform/1.0/data/data HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:23 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, DELETE, PUT, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Range\r\naccess-control-max-age: 1728000\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4h1zNukdxWPdoOAStBqmibOPk3Tpmlc2yFPAL%2FddR5gFXolTinjYxuTflQgKjaAnEhkdRtGnWZNCkjOqhkIjz7SkNioStADk6R548J1meCSiqWHRxJUx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c4bc33527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108338,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"576b7bc38667505f1f1b3604e90aa9c6","sha1":"6cb91f62d6575bb414ad19969bd1d0b36caf6fcc","sha256":"ac38d8d0277c7fb0b013db7348513a8c219ee9586c4fa339a53b1c2728249654","sha512":"dc2014f05457b285146489a05db639b76d2182331d366a29b4176319c6f178c5251d1206d4a98b81da079077e470e51afe15780addf492102c47f608f0a5a024","ssdeep":"768:TP4LoR5T/BIAfXrLwb8gGqab7r5UOH2Alv17DJwOPRcW9j91:kcXgGqab7ryOH2AlN7+mRcCT","tlshash":"b4b3ef79ac5c5ffc96a2907320d93f9f993e411728da8d6c9ecc0e6513dd72a922013e","first_seen":"2026-03-02T21:11:50.240925Z","last_seen":"2026-03-02T21:11:50.240925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-PC6T3RFO.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-PC6T3RFO.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRq9NgyeWsN%2FuOqP%2BxmZGghvfkrFbb1g04x5iGudqKxFcZ1zSKi80J1JZRA%2BND%2BNA75aohg%2BZAuuhjKt%2FYUtrsv3EFW82WeY%2BYaMKvyinIUIqtCwWH34\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c67f73527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1779,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1778)","md5":"d4cc56b7a8fadbdac03f7751e9abc24b","sha1":"2f918aedbc3ea15941541c0702eb66a1746656d1","sha256":"d0b520224d5ad6879a7f2899c6332ab4985897b2a509a56448db986dd1ab8288","sha512":"99bb25a2714a6a3c95f99112da6d8446d56fed837fed2d3085282e42a799fb295a9172075a01d1c27133791faed1cf66cf49f5b79a933f150c351bce8d7bed16","ssdeep":"","tlshash":"1b31e93aa900f15825dacdf4da11e372527b088383f4c3b5dade0b3847165a2d37d967","first_seen":"2026-01-24T12:47:21.358546Z","last_seen":"2026-03-09T15:04:44.350017Z","times_seen":21,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialsymbolsrounded/v315/syl7-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190FjpZIvDmUSVOK7BDB_Qb9vUSzq3wzLK-P0J-V_Zs-QtQth3-jOcbTCPqw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/materialsymbolsrounded/v315/syl7-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190FjpZIvDmUSVOK7BDB_Qb9vUSzq3wzLK-P0J-V_Zs-QtQth3-jOcbTCPqw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://area.promoriongroup.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 935748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 21:06:18 GMT\r\nexpires: Tue, 02 Mar 2027 21:06:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 05 Feb 2026 19:46:13 GMT\r\ncontent-type: font/woff2\r\nage: 306\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":935748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 935748, version 1.0","md5":"db420bde2ce1b766b945587d22e6401f","sha1":"e9eee16a7652ad9006f4c61bc50ad1f7dd531fe0","sha256":"9ecda650ed2191c748232544fb89f2cc108caacb81a77aec4f15a7b6ad4691d0","sha512":"72478245ca2929bbc2bd21f270c81f4a9ac341b6ad8e51aa192c5c6398b274398d06261b9941c6909ca72f9396688bad2f4871fc8f1df51c5947a1d6d0f5c1db","ssdeep":"24576:3g/jfZwaPcDRoezunGIXDEJYXtqod4r/Va6pzMF+a2VK4zCQe:sjZwcPTT4mzde/VPYFCVPzRe","tlshash":"5d15335822fefc10b21b7812095c3eda4d1c6974cbf95fda4dd52aa0cd3b0cca6e4625","first_seen":"2026-03-02T21:06:53.197105Z","last_seen":"2026-03-09T15:04:44.326505Z","times_seen":17,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-ITPHOH4V.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-ITPHOH4V.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nn2mmuvk0MmWxAYexK%2BH7wGK5keQZPBxKYF9XA3%2FJrA4RRqtPBffDpQ5tJmfQVKQgMsKUjmO8Qa01zQZLLiosEqrycgX5sZ6reGUiRL%2BVhjCpV2JSGcs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbeba4527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11988)","md5":"afde0e7c92481b2a083efac366a0dcc3","sha1":"7028e4d381e4b0b0746ab1188bcc42c3a0bcbd14","sha256":"85919ea305b97ba27ccc4f2d98195a3c6c001cc13e774f728afebd9bd6b00fee","sha512":"d1127ca68ef92ae9c40bfb33b3a4b9cd2e09534afdd6f575b5931f605cba1421227d6f7c12d35eef8f9e3762737e01637eefaf3866eaa9040cc74d2615411209","ssdeep":"384:TMirCo4WBMaHea1F8cyfyuNorP06Qeo9wQATO1A0Hjftft2dnhCA:o0pvHeagdfyOE0zg","tlshash":"51c2c7d13391767086af90a718db0005fa341e4ab81a4499f57c9dca7e70d8d63ebf3a","first_seen":"2026-01-24T12:47:21.310014Z","last_seen":"2026-03-09T15:04:44.346983Z","times_seen":21,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UVAVXAP4.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-UVAVXAP4.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00sBWZORrvw7AJJl%2BV8232zROa1kd3QVRqBul7aOIUhbVAyeLOMIoa%2BEUrfXfnxa9pmPx50iydJe9BZQYtmN6ZamsaiIyN5OgnfYGNQ6XCHtnzHNMNlw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbfbdd527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2639,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2638)","md5":"07a9bbbc3e401243822cc253b4556b75","sha1":"49736f2a2bc38581dc5ede028770ad27c69e8958","sha256":"7d1dd781fe49ac5024a9b8f4604e8c9a8b514fa5b4dbf8714efaf9e1a3cbf291","sha512":"d984dc9fae5ae76b4cdd8c6bffcc698b6ea7a8321a66a2018134dcb4ad64851e2f448410ccc89736e8fe2b856d2e2f6d6fab21209036cc0959518cc2d90153aa","ssdeep":"","tlshash":"6251889ac196e17c7705601c78e26da0900c2594cbfc7e687fef5e1669f2e698239338","first_seen":"2026-01-24T12:47:21.339771Z","last_seen":"2026-03-09T15:04:44.33538Z","times_seen":21,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/assets/img/icons/client-icons/promoriongroup/brand-logo.svg","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /assets/img/icons/client-icons/promoriongroup/brand-logo.svg HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/auth/login\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 09 Feb 2026 19:18:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGZm77FGeXGtOCQeVNF3xzijpqM5nwplQwrs3SBjNGJsJDcaG9cE1IIhjVUobk%2FYShELvKzJLMEydWk5jCiQvEhFrPHDw6l6lrV2GKAZTSbPR1GhhkhX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c9cd74527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357349,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b37b1bae2797868ed137a049256fb9d","sha1":"5eaa05e5b4ddea618268a05729adc2fb9659a1f9","sha256":"ec21054e437cd134e770ddcc9998e3e8e74759a60017530eb6619f1a15d24298","sha512":"76204ad0394d48f86f0ec2a2cd17c3036ac9c7d59e260d497fd7df3b1a8edb1d3bb7a1024e3ae73f5d577db63671d259080cc2cc6880885001b49c057aa87fd9","ssdeep":"6144:J+JW+Db9JpBNDZcf/V6UMUXZxNissvB5+8aoAY6AvQ1nNbgwzK5nu8+CeKbtUixm:J+0+VJHNDZcfQbUvuBjaoP6mQPLWk8dQ","tlshash":"367423f30d96aee365534ba4a27d9d5c8de1490b8c01e68cff823ecbd0e965149da07c","first_seen":"2026-03-02T21:11:50.246645Z","last_seen":"2026-03-02T22:14:37.041071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-SXNCP4IM.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-SXNCP4IM.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RoRJbIWsHlAaPzUyhQGwsOl1sDgtGJcmlt6s%2BQomHnagUFWVKMftD%2F1OqVxEGsH8x6FwjU9d%2Bmk5LogrHJD52ftvqa%2BA7H1mGxoHGo7wzJE%2Bxk1%2BnwZl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc3c5e527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70167,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45470)","md5":"ae250d72b6cdfbff86f9ccc49051460b","sha1":"c7191b83960fcea7c4843446eb16b9c26414979a","sha256":"bdf7839d3401067bdf090a099ca3156028a46371da76b963c0b5c2ebe63a15e5","sha512":"6bf4486ffd6295a6d181fd01b011626137884d793bbaea8d2253bda6b27e05b99ce886e271d4f5d7d7936654d0b0471e6fc50cd8fe4378d7d2ac3fc98a11009f","ssdeep":"1536:w6O9e1Rj5zOtfWAXlu5m45dPRYeDCStiYoSe1Anw1tKUK+1skzgj:lO9e1ReZluQkdP2eD5Gukzgj","tlshash":"e463d8523716753642cea15d88f60943b32a25854d0a417cb4accedf65eeec932fbb70","first_seen":"2026-01-24T12:47:21.311026Z","last_seen":"2026-03-09T15:04:44.308292Z","times_seen":21,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-KGBNNPYE.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-KGBNNPYE.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-6MXBTSEY.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bpkfb5JrTQFrnV%2F%2FN6Y8P0UoZJN%2BhoJbmAsPSjqGCo%2FZOBqaVItwoA3PG8T9slRckUh52I%2Bv6QcPta3GyuhPJh3aW8V3UG91ArG2RXw5%2BFG2mCp0NtfP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c87af8527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1413,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1412)","md5":"82d4f7c004a94ee16cbcf74bcdfc8588","sha1":"909141154f9d12fd0a4ba42c8e785a559c4fac55","sha256":"491733f881d6736cc0db43db73c5cf827794b4f807abe3e93acf8783c923864c","sha512":"a53c15148d9cc1b5b7e9f8879af077c9b1f02d738fbcef2e3902c9dedb849dad34af917dcff5f7d545e721cc0a80f418137bb7ce11826778e10fd9f9bca9e742","ssdeep":"","tlshash":"822189a3f010617f1752dc828406bf0a41ec8466c324e7c48367d134a6ef5ca61be34f","first_seen":"2026-01-16T09:25:21.180316Z","last_seen":"2026-03-09T15:04:44.287336Z","times_seen":22,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-5C4WPMAT.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:24.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-5C4WPMAT.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-6MXBTSEY.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lCv1j7xpmKIyIY3pqqggxIhG2U8k5rhsoQF3Fv46fbsjompiQBJK75uw8KpBq%2Bzom6GY%2FNGTTUrxrPQ6yXCVEFtjXkcN2fUG1cCKBLFNEAjkjyhD9%2Fw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c87af9527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2722,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2721)","md5":"939a830abea9567a0e3eade87ac3014e","sha1":"dff504bffd449ed7428835511936bd0424122334","sha256":"2418a2f9bdb4357062ff385dca277ad5dac2c8c2c493fdeb713ac316844f548c","sha512":"d20d74a5059cd95979c6e434581bc393fdd5d68b6f4da8e4c9d46132bb518e99ec5dcc1972cfc8a29c6179fa1e2848b683a70dccbf39d1a4982a4518fe1350be","ssdeep":"","tlshash":"4b516146b569707f6218c8a8849680150f4551eb4abc478af5a6ca54b1f48cce33ff7f","first_seen":"2026-01-24T12:47:21.308741Z","last_seen":"2026-03-09T15:04:44.350771Z","times_seen":21,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T21:11:21.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:21 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5yGJw9z0FBRfzel6O10mZG%2FyG5X4i4uO%2Br5DjtcH3ukg9JpOETedoefj57abTiIVePP%2FGKZ%2Bb6McpDZQe1gc4mQa5Vyiw4uXAsRbDDVzy2WjGsVTchS\"}]}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364b8ebf98a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":31687,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (15541)","md5":"bd65cf854523ac143fc395ebcc119aad","sha1":"448981da8f1c892247545f08badd5054d59d806b","sha256":"d0081544b8207d6a57e51b60edc58586dd542c4205c337e36a6585e2d8ee5bee","sha512":"4c97bdead9924100e613feb6766b62cf5b9275440d88e734539c879b200521ba456ddab808f6ffec4f7e0e758e19b341ba509c8ff1c89bcefed494d60b1634d2","ssdeep":"768:G0/Bm6d/e+5HTOU3TdOevM2gZHEgdZecfBgAQT5:G4lqSd","tlshash":"99e2822241524259f6a34ee231c87a22fd0e4c62a45552b6f6fe4b1beedbc73335c319","first_seen":"2026-03-02T21:06:53.169837Z","last_seen":"2026-03-09T15:04:44.337295Z","times_seen":18,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":65,"dns":28,"connect":8,"send":0,"wait":175,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-4YZPY4YW.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-4YZPY4YW.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kvXyO2wQlXQvyavglAqIyDvqbcHUgjG1I%2FbuTLF9FPTkAGLmjGVDm3XQIVOZXi%2BNJwrIfly%2BGZSebIcXimnjJ35BJuwr5cARM%2FK2F%2BGAvD3cYSutQZP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc5ca5527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2282,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2281)","md5":"5b81867692424bf491ca3241a0742915","sha1":"0b35749f80801f83a29422cd34f42fe6c114baaf","sha256":"7ced85d3747997729679e6642dd521ab89caa31145e07162f5c63e3b1f844e54","sha512":"da7a7438ae7e8923091100e55a46523917fef9a2ecd3c3064b73e2d438c3df05ecd6213072c4329ad36b7f8ad01605e2d13023ad8337f58a60152c78c0e5aa0b","ssdeep":"","tlshash":"a941020d3214757910cbc89d81220b49b2221a5c46269dec7a389ffcd6f4d94233a77f","first_seen":"2026-01-16T09:25:21.155934Z","last_seen":"2026-03-09T15:04:44.320773Z","times_seen":22,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/favicon.ico","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ismib4JF%2FyswKWgvF%2BVF%2Fdu7bMWDqdzjfxABMvnfTOlXfAr%2Bj1j7Wn8g2eVI%2FhQRPu%2FNuY6NJk9i9GBl34zOh%2BGdQmPlAwtrywU3sW3BMn3%2FpDqVTi9m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6364c43b5d527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":31687,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (15541)","md5":"bd65cf854523ac143fc395ebcc119aad","sha1":"448981da8f1c892247545f08badd5054d59d806b","sha256":"d0081544b8207d6a57e51b60edc58586dd542c4205c337e36a6585e2d8ee5bee","sha512":"4c97bdead9924100e613feb6766b62cf5b9275440d88e734539c879b200521ba456ddab808f6ffec4f7e0e758e19b341ba509c8ff1c89bcefed494d60b1634d2","ssdeep":"768:G0/Bm6d/e+5HTOU3TdOevM2gZHEgdZecfBgAQT5:G4lqSd","tlshash":"99e2822241524259f6a34ee231c87a22fd0e4c62a45552b6f6fe4b1beedbc73335c319","first_seen":"2026-03-02T21:06:53.169837Z","last_seen":"2026-03-09T15:04:44.337295Z","times_seen":18,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-JKS6J4Y5.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:23.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-JKS6J4Y5.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/chunk-PC6T3RFO.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8kgavaGxWrEgp6VCl3NXV8GZJeQOaJDR11wzSJM6%2FFpIceo6yo9xdh21xiA20bDuUNaHtWE6LvUtSAZpB6lOJr2wIKyzFV5isf34ZVwM7hf7HCx5%2F8xz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364c6d80a527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1744,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1743)","md5":"05074e5427ce1979d4d6b22a5b50ff2a","sha1":"0ff2725b0cbf17fb94bb93b12e67d8fab9688a69","sha256":"293477682c649dcf38dd7f084445b71bd6c18a114313bf74c9a338cd087f4d1e","sha512":"203d822fb9193adbe8dbdb96ec06227267008538bba68afc286922fcbb6708c1d9b3dae86cec2adcbd8a868bfb61d51c060e25ddd0c954713ff2c25ac5e686fe","ssdeep":"","tlshash":"db31234f6241fc7085d4ccee84220640a21294c755dbc6fdb7b99ecde9bad05496eb33","first_seen":"2026-01-24T12:47:21.304262Z","last_seen":"2026-03-09T15:04:44.27763Z","times_seen":21,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PHK3DF4R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-PHK3DF4R HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\nexpires: Mon, 02 Mar 2026 21:11:22 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 114530\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":337492,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7014)","md5":"4424963de1c4691a7b217ec6678ad2ab","sha1":"2b9c7c3fc16bbb4b16d808a0cb0915aac3f39773","sha256":"9041547f7a705a3823e4a1ad27926a0e927367813988620fb46ec6920831a9f5","sha512":"353e050f507c65ec4569894b97e46f410c37524ea8045d00232563c4087211b951282c5f83ab7d201a9602ac46d1dd8c55cbc351cf421f55c630a5ac42f3ded0","ssdeep":"6144:DJ7O+W4I5W+MZZH9V8QyFbTxRMlKEoxosJIw0:RZfI5W+MZZX8lxoyI9","tlshash":"5e7419cdb7da746243a3a478403f114bb17a7892f88cc894f186d8d42e7496a8277f7d","first_seen":"2026-03-02T21:11:50.25344Z","last_seen":"2026-03-02T21:11:58.53696Z","times_seen":2,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":112,"dns":8,"connect":8,"send":0,"wait":29,"receive":24,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-ELVQYM3L.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-ELVQYM3L.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQ5KoTNezhd0u5NE3ptbS4u2jW%2Fy%2F5wKr%2BNehdW8HWGKXOPxKCkJTaoeJhciL89MAnP3kD75MRO9wExzqFw6o7f2uhw0BXBsTSqo27E1yWpjrL%2BDrm3j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bbebbc527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1145,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1144)","md5":"2a2911b5202f289e87d53a262fc0575d","sha1":"e0e378ad7f63050c65e88dc171db7e1d9005b157","sha256":"ed35b363d64de1b4be1d4004785afd497af94375563fd915a3296847253811bc","sha512":"bf95c5c319ad6a9825e3a024fd3322fbe057878726ff61b403d801797ae2a3846233fadd49856158d4b502d7b9828d79225f1c884919237c65606f790dea5771","ssdeep":"","tlshash":"2e2103ef708275ed009ec4b7d8a13d9601162929170fd3bc37559ccaee94dc94281e32","first_seen":"2026-01-24T12:47:21.345708Z","last_seen":"2026-03-09T15:04:44.293342Z","times_seen":21,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-F7IHP62J.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-F7IHP62J.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJSLS3H8Kzbe57u%2BZRzF61emPdZvb6D8BV%2B%2BAGaSd%2BH%2BgJZFLxouqLKDwfDyFOkzThy4EURM1G6J6WIvoyxCTY27nf3%2F2x79fE3GiLPYOxFDNvVd0H9R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc5cc5527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9664,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7342)","md5":"554bac3bf2933c53f678349491551ec3","sha1":"342e49550ee7dbf7826b7793ec218e93dab7312b","sha256":"750784476e94b2c9f7c81f14ef60304e023a085bb8548f462c613702b9bfb5a9","sha512":"2cb3cf9c4aa3c9c7354fdc72d7a78044c0ba8cebb85f49dd07f398a78db36d747350ee84f5589fbd14160a6d0b60fae8e90ad63444c5ec1b26cda3b67f3907d5","ssdeep":"192:r6lunmPP23tMdaBtKzb/fhJfc8kHY3ozheJsuqoDpT6vJTet:r6lumgC+4vkE7t2E","tlshash":"5712738b52423933078fd29be1f002536a354ce9a91b052c70b89dee57dfd4876aab71","first_seen":"2026-01-16T09:25:21.178478Z","last_seen":"2026-03-09T15:04:44.357651Z","times_seen":22,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-UA5SRARN.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-UA5SRARN.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNCVbyb5Ul1RuN6tsNiuHe0u%2FVL66r%2B%2B4lDbdo3dG7jPAWR9k0uXn6EpeORGWKjeIQNXAyrh0JugqZtrrZL9KULC3DXqbFzBb7UG8yKwkujEP54sNUUs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc6cc7527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43379)","md5":"137fd5989236748444ef7756a5fc125a","sha1":"45591832c91572f2aef5afc3bd0598dcf792b07d","sha256":"0ae0edc13f216809f9a48f7c82431370abe4f1a88bb23041e6b47d5abd5578f0","sha512":"5f4cf0a75a3fd4ec7691a313ac42d015351b448e03e73a674eb3b253be7f7c313c50e38c6512e54b1c66ffe0ab2859781a08a391f30def6b8d324aa8a1355c00","ssdeep":"384:CshT1yR4YmwOlD+XJJfhi11lohz16daPuL+O3XJAcDiXOB6gkE154DOiE7ydSYxg:CWAl2DmI54mdBX430QRksl9aLOtPy","tlshash":"2b13c68ab266f23407d9a09c94768583e31d98d1a404406fbab8fcdc35edc9466bff74","first_seen":"2026-01-16T09:25:21.187002Z","last_seen":"2026-03-09T15:04:44.358513Z","times_seen":22,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-KQNCXCGO.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-KQNCXCGO.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fa3twbHztrZFm6K%2Bi%2BtpgGnQNrE%2F1i5ubsq6ta9JygODQc1q2CSMdIWbYMOiTrKHTc1eNHCOlRFSz9nggXTrPRAkGnwTiATFDjcVCBLkbocqLvibIXc%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc6cc9527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12419,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12342)","md5":"a4fac33a4ff52e0298bc49c61cd5848e","sha1":"dc56c6738491dc875170fd930ae0b96471c9d8df","sha256":"8d6acae2e952b612c2bb8eb2cc169948a0cf614f1b743ac0a4744f32474b9840","sha512":"9b94385624f2522c49c08c1acb8a32da19b1acb66df11786789ed0bff2164478e898f91b2690d90cd16537350f10dfd4524a2a314ad9bbe3c752f9d4d599083e","ssdeep":"384:eK93hyAICMsu9yfE+bB6hap6hP4E3ccx0J05sw:b9TIf4/B6hap6hAE3v0JG","tlshash":"d242e9627211f273539a00b4ad705507eb097aaaa80a4c0df11cdadfb17dc4592fbb7e","first_seen":"2026-01-16T09:25:21.166456Z","last_seen":"2026-03-09T15:04:44.339097Z","times_seen":22,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"area.promoriongroup.org/chunk-LP3WF2KP.js","fqdn":"area.promoriongroup.org","domain":"promoriongroup.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://area.promoriongroup.org/","date":"2026-03-02T21:11:22.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoriongroup.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 20:18:24 GMT","end":"Fri, 24 Apr 2026 21:16:50 GMT"},"fingerprint":{"sha1":"EC:09:26:E7:8D:F5:28:CA:9C:7C:CE:1A:C2:C8:FA:0A:B3:D5:D4:E6","sha256":"C8:FA:6C:52:5E:95:9F:CE:C8:A8:D8:B7:3D:8E:7B:E0:D6:90:64:80:33:8E:E9:84:88:ED:94:CF:A0:1A:4A:04"}}},"request":{"raw":"GET /chunk-LP3WF2KP.js HTTP/1.1\r\nHost: area.promoriongroup.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://area.promoriongroup.org/main-RTC5AYOI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 21:11:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Feb 2026 19:22:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8UUaD2%2FxkueGtgJMaWLBxlGXYhTB2VGEvyKWg%2BmvUV8QbVubeKQZ13DAZwppOfcQaHLxaaIsExzz%2BNo2nmAMoTAQdVwmhRcAf78uCWEI2R3oX0NOMna\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d6364bc6cd6527d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32866)","md5":"898572c0987b4ecbbd105c414bcf3e2b","sha1":"91e10409390c7b62faa94dc360d978b0e16330b3","sha256":"3c20ce2b7abde3af7219cea0773c64a115906e6e44befd20bb37f3b73ce4a588","sha512":"10fefaed7155050c5825c4ea0760da55d397b24db8f1345d0595e749975a8b1d38e4615ad0e0a7469e2b4cddea513a0b86379ab3c4df5aa1de005e9b0633f864","ssdeep":"3072:tQfn3TSxQrsOWsbqiaZmIAd4Sl9Psseoo3yIe5aU5rLn5:MmQcmI24Sl9UseoV5aUd5","tlshash":"c3f3b3dc7696b02383ae117640bb0447f37968821c4e042cb5a8e9ef397595da2f7f78","first_seen":"2026-01-16T09:25:21.193063Z","last_seen":"2026-03-09T15:04:44.321879Z","times_seen":22,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}