{"report_id":"39594efc-b11a-4c2d-81da-569c20b36d89","version":0,"status":"done","tags":[],"date":"2026-09-20T12:21:52Z","url":{"schema":"https","addr":"t-dominion.cam/","fqdn":"t-dominion.cam","domain":"t-dominion.cam","tld":"cam"},"ip":{"addr":"163.61.188.5","port":0,"asn":153568,"as":"NEW DHAKA HARDWARE","country":"Bangladesh","country_code":"BD"},"final":{"url":{"schema":"https","addr":"t-dominion.cam/","fqdn":"t-dominion.cam","domain":"t-dominion.cam","tld":"cam"},"title":"Personal Banking, Loans \u0026 Credit Cards | TD BANK","dom":{"size":40876,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8b780a5ce4b5ea155871c04f553530af","sha1":"27b92fd5fddeefc9f33ee39a4ef629e73c24ee8e","sha256":"fb3d46f8fcdecbe328946a5429ce0ee3846bfa85c5e0df75b50838c7c975f5dc","sha512":"ecf8b26fb88dc02cd44d2b71d4748184f8808418c27889cfe128f595af16b2cbc9d80e72c807e9ecff5fd8fd7be6fe36a6e0ecf151f98c82533b58e9097fe502","ssdeep":"384:e4LFX/jF5z2EjVuWygTDK5NDhnnvqehjeWweYqbWMze+hlT3jWNBQYPylEm5pQXG:HJHzxlCZnHhXYOiu7CNkjpQ+RVIqh","tlshash":"8003d532a1f0213625a7e4c17a915b9f7aa0d403d5070b94b1bc46a9cfd7fd7ab2324e","dom_hash":"domhash846e7f6943dac848a26ad9f6f17130c0","first_seen":"2026-09-20T12:12:26.009852Z","last_seen":"2026-09-20T12:21:54.048798Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"t-dominion.cam/","fqdn":"t-dominion.cam","domain":"t-dominion.cam","tld":"cam"},"ip":{"addr":"163.61.188.5","port":0,"asn":153568,"as":"NEW DHAKA HARDWARE","country":"Bangladesh","country_code":"BD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T12:21:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2292,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"picsum.photos","ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-14","domain_rank":29556,"first_seen":"2017-10-10T10:03:26Z","last_seen":"2026-09-13T23:01:58.718921Z","alert_count":0,"request_count":12,"received_data":9927,"sent_data":6610,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fastly.picsum.photos","ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2017-09-14","domain_rank":452388,"first_seen":"2023-01-26T01:05:02Z","last_seen":"2026-09-19T07:02:05.47594Z","alert_count":0,"request_count":12,"received_data":472349,"sent_data":6815,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"t-dominion.cam","ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-09-19","domain_rank":0,"first_seen":"2026-09-20T12:12:20.782994Z","last_seen":"2026-09-20T12:12:20.782994Z","alert_count":0,"request_count":3,"received_data":46514,"sent_data":1532,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"t-dominion.cam/","fqdn":"t-dominion.cam","domain":"t-dominion.cam","tld":"cam"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9912aa1cb2c19f4e0c56afd9d5e5ad2","sha1":"9b8ce2ca248670a0bb3c6e7d508351f0b71b11f7","sha256":"150242576fe47654a8b5916a3b48f4eadd717942836d19a2300fa0b5088b2171","sha512":"71212a3dd954c6bf127d6c840cedf84dd048cda86e905f227fdcdddf8f3366200d9cd18ffc920f3a3fbea422c12cff566584e694f3aa3b4efd995f5290623a1c","ssdeep":"","tlshash":"b4315677b1fc047149bb47e391465bec361950423b47d4559bcc881c1d98ea5107b2e2","size":1590,"data":"","first_seen":"2026-09-20T12:12:26.032177Z","last_seen":"2026-09-20T12:21:54.065449Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"picsum.photos/seed/gb-bills/600/400","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.019Z","timestamp":1789906884019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-bills/600/400 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/949/600/400.jpg?hmac=8R-1KEvShmnk-yZ7_Sv9o3R47y8r_GAyCqYMJi8shzU\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6KYh4WhsoYysG2Dtayzm%2Fy667MG%2FZjhNhvK4v%2Fq6yQChZbjmws%2FwANI9W8dqCqYZuYZC3RNk4ov6As91SWw2GRcvD5cuXK375rQqsVNbswGf%2FyCClnI8ziiu0gzIZc%3D\"}]}\r\ncf-ray: a3e0ca29a8ee49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/156/680/380.jpg?hmac=XVZJJJtX1wzyAps61pf3ijOwCToglJU2USrexXU0Tfc","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.212Z","timestamp":1789906884212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/156/680/380.jpg?hmac=XVZJJJtX1wzyAps61pf3ijOwCToglJU2USrexXU0Tfc HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"156-680x380.jpg\"\r\npicsum-id: 156\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 912\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.252778,VS0,VE2\r\nvary: Origin\r\ncontent-length: 47096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":47096,"size_decoded":47601,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 680x380, components 3","md5":"8e400c8b2dcad6a62f39652db9f130c5","sha1":"cba902a40f7670fb519d0a8739e0218c69c15510","sha256":"94c4f7b9fd20ba80237b57ae436aef7d520b29a8bcfd1c6afd1c8cf83522a9fa","sha512":"b7f7ad63c26f7f299f190210dd0c9b9f3b8f2e1edfc66701681c8016062d82b333a94db1f82e60eeb9aa7aab5a57c9c9e62861d63c90f37973e3c9b2cab1dd95","ssdeep":"768:9PsZBTvYZhLJ3g72kAexMCLFcnInI7z+3y0LKZcdsJ32Za/hyv:9UZBMVrkAeyCLW/zcgeYaOhyv","tlshash":"7423f19fe661ee12dd0c79a43e6581de9f1dc5991e01dc3c2f82869029c09bea4f21f8","first_seen":"2026-09-20T12:12:26.011415Z","last_seen":"2026-09-20T12:21:54.050924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":26,"receive":10,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-wallet/600/400","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.018Z","timestamp":1789906884018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-wallet/600/400 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/721/600/400.jpg?hmac=u1SWsr6VbXsDElG75HE-3JFoRY9e6AyQMCtVNqsEMZA\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMxiJmjBm9B34duyjhyZ1vRnT9gagkF33AhOUe7UC8wQnWG61szYXXVSHRe9sD%2FHfmXTWlsZPzCJwhzPqTFGChsMX236%2F07UOJOtBS7Znb1yIaUoeRLqvCEiWG0tT6c%3D\"}]}\r\ncf-ray: a3e0ca29a8f749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-deposit/600/400","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.021Z","timestamp":1789906884021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-deposit/600/400 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/696/600/400.jpg?hmac=X0pmSeuhwRTv9Ia1G7MW-4zRTU6fZz7MtCfgpc1Fc4U\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HzZeoDKt%2FdqK14r6Vyxu%2BGtrdyxgkImxk%2Fb8pEN1q2Xk7LVwyt3OZ6UPV1dzod0yKdnagVPgbdvHL73%2FGZfna0fgRO83rOOWtFGD5Sjj%2BZvMDE84iPcfUaoblT8aA3Y%3D\"}]}\r\ncf-ray: a3e0ca29a8f149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/84/680/380.jpg?hmac=ol-LEUKk9zcyU6TcQ7wk621cN5XFOq1FRfErjrNbmsA","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.214Z","timestamp":1789906884214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/84/680/380.jpg?hmac=ol-LEUKk9zcyU6TcQ7wk621cN5XFOq1FRfErjrNbmsA HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"84-680x380.jpg\"\r\npicsum-id: 84\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 912\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.256533,VS0,VE1\r\nvary: Origin\r\ncontent-length: 22809\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":22809,"size_decoded":23312,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 680x380, components 3","md5":"20702d1cd6a655689fcc197fd5a278e3","sha1":"2de8a9b9d7ed00b9b444befdff3e6c4c2a5369ff","sha256":"5bd016b1d7521e2a2b2f3662e0a930bea0425b9d01196c7d1e976b48bf340917","sha512":"342653573427cc0ef8a50d6845d2418537079e0467422de3a442a8f3c884653a3565408cd1873fb5583fe3d91e24693941840743745258111fef87262e825af8","ssdeep":"384:m27sOytDd664hiDRJm62QGvr7fePM3TSd0nD5WuJbnqrxxgPEADOTbqS:H7SDd0gvm6XGvr7feP2Sw5tbnqAEePS","tlshash":"08a2e19ea616bf37ff99a1b2119637226f096a5538c3213d95493940d507cbcc8b0dac","first_seen":"2026-09-20T12:12:26.025303Z","last_seen":"2026-09-20T12:21:54.051661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":26,"receive":9,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-dominion.cam/","fqdn":"t-dominion.cam","domain":"t-dominion.cam","tld":"cam"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T12:21:23.245Z","timestamp":1789906883245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t-dominion.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 21:29:53 GMT","end":"Fri, 18 Dec 2026 21:29:52 GMT"},"fingerprint":{"sha1":"BF:57:89:3C:37:FA:85:FE:A6:99:0D:19:E7:1E:76:23:B9:6B:A8:03","sha256":"37:4B:7C:AA:25:94:55:03:6E:F3:F2:65:1A:6A:4E:E4:5E:75:21:89:3D:50:B2:3C:12:A8:C0:52:6F:7A:8B:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: t-dominion.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sat, 19 Sep 2026 23:01:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10178\r\ndate: Sun, 20 Sep 2026 12:21:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40876,"size_decoded":10608,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"838eecd9afa4352f381cd94586883e69","sha1":"4ff5c57f7c7ee9412bd1e51efe78ab8889e174ff","sha256":"3088c552cd66d95378bb152688982eb47b7fa17009e44debc745a5c1e5753c89","sha512":"96a5f3204dab831b837a8d74b893408fb1b649a7109ccfde447105aa6d58f50e94bfaae31525de0a518d9bd2e06dba6984297c2c14571566d4f1f22add8710e2","ssdeep":"384:QQLFX/jF5z2EjVuWygTDK5NDhnnvqehjeWweYqbWMze+hlT3jWNBQYPy2Em5pQXe:nJHzxlCZnHhXYOiu7CNpjpQ+RVIqF","tlshash":"ab03d532a1f0213625a7e4c17a915b9f7aa0d403d5070b94b1bc46a9cfd7fd7ab2324e","first_seen":"2026-09-20T12:12:26.023144Z","last_seen":"2026-09-20T12:21:54.052372Z","times_seen":2,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":4,"connect":101,"send":0,"wait":109,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-dominion.cam/td-bank-with-tagline-logo-png_seeklogo-267634.png","fqdn":"t-dominion.cam","domain":"t-dominion.cam","tld":"cam"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.014Z","timestamp":1789906884014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t-dominion.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 21:29:53 GMT","end":"Fri, 18 Dec 2026 21:29:52 GMT"},"fingerprint":{"sha1":"BF:57:89:3C:37:FA:85:FE:A6:99:0D:19:E7:1E:76:23:B9:6B:A8:03","sha256":"37:4B:7C:AA:25:94:55:03:6E:F3:F2:65:1A:6A:4E:E4:5E:75:21:89:3D:50:B2:3C:12:A8:C0:52:6F:7A:8B:19"}}},"request":{"raw":"GET /td-bank-with-tagline-logo-png_seeklogo-267634.png HTTP/1.1\r\nHost: t-dominion.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 27 Sep 2026 12:21:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 19 Sep 2026 22:56:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3306\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3306,"size_decoded":3749,"mime_type":"image/png","magic":"PNG image data, 185 x 185, 8-bit colormap, non-interlaced","md5":"623d788c998aba8451ab57818b552f4c","sha1":"ff67cff1061a0fc36149ffabb8b1180b8536aaa9","sha256":"9775c9ca3472c0ff4f34cdc8ab9919b584107b3b31a64cc6d5bcc9b9339c16d8","sha512":"c00a048fd4f0f9147cadb545409c54fc1b2b73163de7982229f55b859195a402f485fa297b1e9ea76577b2b151843cfddbaf05ff5dbf420c07b8554c57a7fc74","ssdeep":"","tlshash":"51610983d5eddc30d492292c72c886434123cc4609b697dba2705ff3d99b9126eac2ed","first_seen":"2026-09-20T12:12:26.027691Z","last_seen":"2026-09-20T12:21:54.053257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.178Z","timestamp":1789906884178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://t-dominion.cam\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352192\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":19,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.180Z","timestamp":1789906884180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://t-dominion.cam\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352192\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":31,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/491/680/380.jpg?hmac=9dG50ip6AZRfAijjfDGV7uV7RTSD8xX60qzDTPLDoP4","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.206Z","timestamp":1789906884206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/491/680/380.jpg?hmac=9dG50ip6AZRfAijjfDGV7uV7RTSD8xX60qzDTPLDoP4 HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"491-680x380.jpg\"\r\npicsum-id: 491\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nage: 912\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1789906884.248365,VS0,VE1\r\nvary: Origin\r\ncontent-length: 40942\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":40942,"size_decoded":41447,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 680x380, components 3","md5":"fd900282f9895c3c133113b5dd3cad1e","sha1":"00d04be7bf7e0dd7d9e794278c1afce899e2b858","sha256":"39be758f404b81d203582761cfc88dc23d1791d18113bb7c7399ee4a50bd4829","sha512":"42eb29fac59db27db7327bbe35dfaeed072fd6371b96fca99c1b15996674a7d6de4c1634530a348c2b52538cb167ae97ff4c07e3ab64b9f45b3aa0dc9c38467d","ssdeep":"768:V2wnKP/pS3kWBkANgcsoUwyiZR5Lpau/eD8pokb6KhcxlQbr3DyRJwp1:UwnqS3n2ANDsoUCvLppj6Q3zyG1","tlshash":"7003f111475e6711df78933e233978546ba9b8b134b1127f4fd4238dae29ca0df49b08","first_seen":"2026-09-20T12:12:26.026277Z","last_seen":"2026-09-20T12:21:54.057974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":10,"receive":9,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/62/880/550.jpg?hmac=E_FshmgM2-FtJnNAJExGntKquL8yUHlj64LcO5jAfHI","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.222Z","timestamp":1789906884222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/62/880/550.jpg?hmac=E_FshmgM2-FtJnNAJExGntKquL8yUHlj64LcO5jAfHI HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"62-880x550.jpg\"\r\npicsum-id: 62\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 911\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.251700,VS0,VE1\r\nvary: Origin\r\ncontent-length: 48642\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48642,"size_decoded":49145,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 880x550, components 3","md5":"d71b8d6eb00eb5396d0d5b1f18ad9cd3","sha1":"9d77e2fd686596906cfe6f6206b49eea8072258e","sha256":"6bc693060a5f8d79b60217cda94ca70a25b73fe810c828a6d0c6d188db19720d","sha512":"74f1a28236cd52f997a67a55bc502a06acc1ddf6994e0844daaf944aff824200a4afdbd9128e5cd0c94c44a88ce52bd04aa8f6fdc2441cba0c5bb901a4400f5c","ssdeep":"768:xmirudtQo6WzpsIr7HZwhP1lsAoP0/hizJ1IkXg/UtP8DZDe9ZEJzGW1Pur9g1K:x7ryNjFsIvZA80/h+HEUtP6CvElzbc","tlshash":"4b23f1fa22e0072af722f0f85a052379488af70856f2cb6a5424bf50be351f4dd75246","first_seen":"2026-09-20T12:12:26.02871Z","last_seen":"2026-09-20T12:21:54.058625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":27,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-offer-mobile/680/380","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.024Z","timestamp":1789906884024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-offer-mobile/680/380 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/530/680/380.jpg?hmac=hyb0ZBNJVxU_BOc9SPNbxNZdaGtfhkV-lM6w0UXHhKU\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iltT3q84wfHdGJI%2F0xoz7GtVkHz%2BOYrikkea3Q%2FxcXh1SFBWlkoHWr2YYah8j6817Iuel8%2FddhtLDDJQT68629a7q2iEtiffOQKnGxrRpR2A6vq2oq9BPTBcg5xeBQ%3D\"}]}\r\ncf-ray: a3e0ca29a8ed49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.179Z","timestamp":1789906884179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://t-dominion.cam\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352192\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":22,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.182Z","timestamp":1789906884182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://t-dominion.cam\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352192\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-20T14:44:15.075291Z","times_seen":293219,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":39,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/360/600/400.jpg?hmac=RWbT381yiGwcuoZURREljRcfruKeYYmUgnCNHYlDiYI","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.217Z","timestamp":1789906884217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/360/600/400.jpg?hmac=RWbT381yiGwcuoZURREljRcfruKeYYmUgnCNHYlDiYI HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"360-600x400.jpg\"\r\npicsum-id: 360\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 53215\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.250722,VS0,VE1\r\nvary: Origin\r\ncontent-length: 25830\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25830,"size_decoded":26337,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 600x400, components 3","md5":"680a1dca29a30453b64474a3e81fc540","sha1":"b36ec420375e0ab989aafef26d4545c9165a81fb","sha256":"53d97d52bed8b3916d7271d9d28a528d28a239f49e8a75b079c58fa72b3268d8","sha512":"5d103d3f39ddeae2a55fc3ff89714c86031c228bdbd417f1ea6c49d65ac56a02bd2e1861247a4a84c274c0b4687ba0a10eec926d56d6c6907b233be226c1aee7","ssdeep":"768:Nw+VpV2xqWmwL3wdh1IrNo/cxalVqiW6YwqTunZjtqsjLs:bVpVQqM0hSNmcAlVlaKnZBqV","tlshash":"dac2e14a9e4d2d967398513c43801f8d79d625a13b00d9a532ff62dee467e70cf8dc94","first_seen":"2026-09-20T12:12:26.017695Z","last_seen":"2026-09-20T12:21:54.059271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/356/1600/500.jpg?hmac=Y5KJx2q7H9Z8q2HyGlPEbuyyUl5AQ0byT-gQRq1OgXA","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.221Z","timestamp":1789906884221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/356/1600/500.jpg?hmac=Y5KJx2q7H9Z8q2HyGlPEbuyyUl5AQ0byT-gQRq1OgXA HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"356-1600x500.jpg\"\r\npicsum-id: 356\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 911\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.251702,VS0,VE1\r\nvary: Origin\r\ncontent-length: 81431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":81431,"size_decoded":81937,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1600x500, components 3","md5":"822e86619adcb44ccea5a3dfd9d6d2f6","sha1":"b3a0588f86d3aad41d5bd81f4b3f525df06efc5a","sha256":"063fddb7d6544d335e040a6d814ee09b6ee0edada56c54a9e01be256535717a6","sha512":"3cef75afc1e6cfbb2766a72609797c2180b1eab5abd70d5da9305f3c459a32340e5831c8e6eb377f5b905cc0e5ac38cbebf5837410bf6f91b7927df6d814d19f","ssdeep":"1536:HMgIvb5opuTOzLVmW+GiCNDE5p3LTshcsaubVmt6eG9q6uKCA:sgIvb2UTOzAWdVEP3LT9Tuhmt6e563b","tlshash":"2f830233e7450832e2e75eb9ed531b9935c0fe535f8697a918afa6080c18c7c1f64ca6","first_seen":"2026-09-20T12:12:26.012679Z","last_seen":"2026-09-20T12:21:54.059906Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":27,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-hero-family/900/620","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.016Z","timestamp":1789906884016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-hero-family/900/620 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/154/900/620.jpg?hmac=Zi-phnBFhItv-_KykX2M4u4T7tUO590Py9jSA4_cAYE\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byBY%2FFI%2FOimby%2BQjbDgCu4FQLlcDDxVCZITtks%2FskQEWrxW21TS00D%2BmhrURavFwlICxCZ8MwEv2SC5ISFd8niaVHw6dkG2TNZNqUmiCEeu1AHJii5iKScT9i3MPBeE%3D\"}]}\r\ncf-ray: a3e0ca29a8f549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-offer-loan/680/380","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.023Z","timestamp":1789906884023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-offer-loan/680/380 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/156/680/380.jpg?hmac=XVZJJJtX1wzyAps61pf3ijOwCToglJU2USrexXU0Tfc\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHC0w7EM2a%2FfWUxN7rj1iNUv46d5oR3qtOu9kWLVqvGJztDAkYiZCuE27nZgPIr1DgPgUrDqhQsA9nlFVL6fznOIJZ4yw18CNo%2BnyV5E3Gmev6j%2Bt19LuMddNC56e0A%3D\"}]}\r\ncf-ray: a3e0ca29a8f349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/949/600/400.jpg?hmac=8R-1KEvShmnk-yZ7_Sv9o3R47y8r_GAyCqYMJi8shzU","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.216Z","timestamp":1789906884216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/949/600/400.jpg?hmac=8R-1KEvShmnk-yZ7_Sv9o3R47y8r_GAyCqYMJi8shzU HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"949-600x400.jpg\"\r\npicsum-id: 949\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 912\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.256517,VS0,VE1\r\nvary: Origin\r\ncontent-length: 21416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":21416,"size_decoded":21921,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 600x400, components 3","md5":"984e6c1ff860d5fb95fe2cb147eb3dde","sha1":"78176194a7b21c12a722bf94e221be36db59afbb","sha256":"03ce58ba0ee0d5e3e05d6227ae6ac99762208f3d14eb34c44a7c80c8d25ff735","sha512":"2d2760dc5e5cd8f8279991055f5b84e5d3b9e9b849e87979b446f9e7d85024d1f6154da2c72400c17e624667911890fed69046a64c50420c47b96edbbebb4899","ssdeep":"384:mfoQtxOVtSGnki9OXIGto2/0An6DA0Qx8yUmhAJTmW3cZv1OZYl3WymE7X2I8qf:OTtsXSGnki9OXIGtl/0GCDynNOZ+rmE9","tlshash":"aba2e26d07510281ddafb63c141716379091eb496a218d7e721519ec1e4bcb4eedfa40","first_seen":"2026-09-20T12:12:26.018692Z","last_seen":"2026-09-20T12:21:54.060571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":26,"receive":8,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.005Z","timestamp":1789906884005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 12:21:24 GMT\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-09-20T14:11:11.942043Z","times_seen":6351,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-digital/880/550","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.022Z","timestamp":1789906884022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-digital/880/550 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/62/880/550.jpg?hmac=E_FshmgM2-FtJnNAJExGntKquL8yUHlj64LcO5jAfHI\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CooaWX9nmB%2FW17ZTfZpb11EtT99%2BpwC%2BiCOgui93ob%2FTsceaVVFVAzXXCb7WyqhfUqPilNZ%2B6M1loM5wpDFrPGEL%2BPi8A1gKng5vYh1BbApCmMkpxizuhOf%2BWSm9rFU%3D\"}]}\r\ncf-ray: a3e0ca29a8ef49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":59,"dns":0,"connect":11,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-offer-learn/680/380","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.025Z","timestamp":1789906884025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-offer-learn/680/380 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/84/680/380.jpg?hmac=ol-LEUKk9zcyU6TcQ7wk621cN5XFOq1FRfErjrNbmsA\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqF0UBclFYsJwec34EyaiVXnDQHBBpcKHf9bJYa3LS%2FbeKbri8LuY0kdGdSJnOJOFyFFP%2Bl8OLxhNP9AM%2FX8SiLNCuN09vZ1fSkCliCJEXNE%2BMMT2pgdH%2BG%2FwvuxSSk%3D\"}]}\r\ncf-ray: a3e0ca29a8f249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-city-dusk/1600/500","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.115Z","timestamp":1789906884115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-city-dusk/1600/500 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/356/1600/500.jpg?hmac=Y5KJx2q7H9Z8q2HyGlPEbuyyUl5AQ0byT-gQRq1OgXA\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KPzkoZeCkzGEepbqW4sS3MTPZZtZ7IWJmkAM%2FXHg1yDMbjsLsQtR9sX9juM8Y3jLLFL7nxmcoO3aJl35exixS0P9ax%2BLjAYt51lvB1OdhKmv9F4VlwAnIhnnGNWDz4%3D\"}]}\r\ncf-ray: a3e0ca29b8fc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/530/680/380.jpg?hmac=hyb0ZBNJVxU_BOc9SPNbxNZdaGtfhkV-lM6w0UXHhKU","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.211Z","timestamp":1789906884211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/530/680/380.jpg?hmac=hyb0ZBNJVxU_BOc9SPNbxNZdaGtfhkV-lM6w0UXHhKU HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"530-680x380.jpg\"\r\npicsum-id: 530\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 912\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.252075,VS0,VE1\r\nvary: Origin\r\ncontent-length: 51859\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51859,"size_decoded":52364,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 680x380, components 3","md5":"9decf251b6bb5c08ddc6313ad08db66c","sha1":"237a49744e8d809462da7420aef402b59dd9f8ee","sha256":"55a4a58a6ce9038d715e99c6d736ceb8d0d25fdf7616b5f653c77d8105991a0a","sha512":"393f123e87e1876e1fbc74850b79542369ccf49e051610daddccef7c4031eb3cbbf9111c8205ce7b3c7893dbf21b4f3066fb19c1976c0cca2e8a49fbf4cde021","ssdeep":"1536:/Y0s8BQGtMhCOUUCsoq7bsgXhrVShYdXPlMu05G:/Y0s8BQG28xZqnPlVSGdXPlMugG","tlshash":"2b3301c1d4450eccdbe128f7a4a2973f95240c7ec41a757ba5d2537c4bbbc2c8a82a76","first_seen":"2026-09-20T12:12:26.016672Z","last_seen":"2026-09-20T12:21:54.061688Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":26,"receive":11,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-offer-card/680/380","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.026Z","timestamp":1789906884026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-offer-card/680/380 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/829/680/380.jpg?hmac=coDx2bsDqxQXOsCSAA1aw373n_oGdE1k_gz3Ak6EjpE\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oa9pXzXFOObxh%2BlXZnO6PyQh%2F1Ad2EvW8bBCI%2FB%2Bn1wEGj%2Be9kyTTJEYoD632XGvPZnaXJIunPtF8HhAFjDgV48rjLVj33stUyg2CA78mT5GHW45GDWmNWEexttevUs%3D\"}]}\r\ncf-ray: a3e0ca29a8f649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-offer-home/680/380","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.029Z","timestamp":1789906884029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-offer-home/680/380 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/491/680/380.jpg?hmac=9dG50ip6AZRfAijjfDGV7uV7RTSD8xX60qzDTPLDoP4\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nA4ywFPhvf84n8lUSzYpxD7sh9Mj3eAlZCj1%2F9hTku4hUjghwQ3H7Ifqsqh9VCStoAQD%2FYTUruBAtGZeDxhXf96Su7npFMGII8wjMqZAnhuv2%2Bf4YJ7nWwTGn3zyeHE%3D\"}]}\r\ncf-ray: a3e0ca29a8f049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-dominion.cam/favicon.ico","fqdn":"t-dominion.cam","domain":"t-dominion.cam","tld":"cam"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.504Z","timestamp":1789906884504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t-dominion.cam","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 21:29:53 GMT","end":"Fri, 18 Dec 2026 21:29:52 GMT"},"fingerprint":{"sha1":"BF:57:89:3C:37:FA:85:FE:A6:99:0D:19:E7:1E:76:23:B9:6B:A8:03","sha256":"37:4B:7C:AA:25:94:55:03:6E:F3:F2:65:1A:6A:4E:E4:5E:75:21:89:3D:50:B2:3C:12:A8:C0:52:6F:7A:8B:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: t-dominion.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-20T14:47:38.994697Z","times_seen":155836,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/829/680/380.jpg?hmac=coDx2bsDqxQXOsCSAA1aw373n_oGdE1k_gz3Ak6EjpE","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.208Z","timestamp":1789906884208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/829/680/380.jpg?hmac=coDx2bsDqxQXOsCSAA1aw373n_oGdE1k_gz3Ak6EjpE HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"829-680x380.jpg\"\r\npicsum-id: 829\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 911\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.252510,VS0,VE1\r\nvary: Origin\r\ncontent-length: 49959\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":49959,"size_decoded":50464,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 680x380, components 3","md5":"7d524829841de43006ac0c3791e5cfdd","sha1":"d512a26cb0df24c6f4652b2451ddd2f49a8e9ec1","sha256":"8eb678bf7c1fd49de6289f810e7e4c70333eb5d8a70edaaeff091e94741be846","sha512":"034945c2871a85c7fde50186c57ec9d07ed424496ebc8cfab1b6971a696651248191264d2723fa3c4b99c023faf1992d5d1df96b71be1052ef725eb9d76e0630","ssdeep":"1536:4AlvXUSnPU19SEDYuVImFqoYfh3EkwPyVy:4A9LnPUS45tqqkwPyVy","tlshash":"4723f12f43360641c3f25eb6e5dd16809f667d39b3200b98c5984749d361cf9a6680ff","first_seen":"2026-09-20T12:12:26.013911Z","last_seen":"2026-09-20T12:21:54.062763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":26,"receive":11,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/721/600/400.jpg?hmac=u1SWsr6VbXsDElG75HE-3JFoRY9e6AyQMCtVNqsEMZA","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.215Z","timestamp":1789906884215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/721/600/400.jpg?hmac=u1SWsr6VbXsDElG75HE-3JFoRY9e6AyQMCtVNqsEMZA HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"721-600x400.jpg\"\r\npicsum-id: 721\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 103451\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.250574,VS0,VE1\r\nvary: Origin\r\ncontent-length: 11681\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11681,"size_decoded":12189,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 600x400, components 3","md5":"f4cf4825579403bfd102b9733f1dee95","sha1":"8df471dce7e5a0199f288a2a91b9ea6ba98425b2","sha256":"bb82ffe6ad3d540bc2de0eb16eff20eb82e7440d5f8af47f8bc99395db4bbae7","sha512":"f5a032eec2c89c7fcf2dc27529a6384ef3779b7b44d6d7c61f7fb5c110d3d6e326cc963a63862e1e649624e5eef6920dd3db33eed298e1e41e17b299ebc8ae60","ssdeep":"192:mI3GGoYAgBNQw4qggP7eeR6nvdK2/drGZW972lNtecUyL7tE6yXYOnhPn/cl:mOGGo1gb4xw60Avdv/Vae2lNtecUyL7L","tlshash":"b032af8b1ee3d741ef5f20b955e557606e41462ca3069fb204d3ae3ccc9acb7c8b9091","first_seen":"2026-09-20T12:12:26.021953Z","last_seen":"2026-09-20T12:21:54.063406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/696/600/400.jpg?hmac=X0pmSeuhwRTv9Ia1G7MW-4zRTU6fZz7MtCfgpc1Fc4U","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.218Z","timestamp":1789906884218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/696/600/400.jpg?hmac=X0pmSeuhwRTv9Ia1G7MW-4zRTU6fZz7MtCfgpc1Fc4U HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"696-600x400.jpg\"\r\npicsum-id: 696\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 912\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.250913,VS0,VE1\r\nvary: Origin\r\ncontent-length: 23484\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":23484,"size_decoded":23989,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 600x400, components 3","md5":"dea717292624b679bc83f5713b009cdc","sha1":"c64df72756d3671724d9fe887f6d3aa101f82b80","sha256":"66c62bb9dc1d2ded8c69b1b7337f31182283d7e347a55d48fc0defaed194ae7b","sha512":"6141294861635487de09349eda7bd99518ae055a92845fc4d931bf076113b174057f333fe36a1d43bc047b5ff7440d1e6ef9eb39feeed091316f81c644f48244","ssdeep":"384:mVtSeSpjLb7TQkGF597gNOWtlmhc5veUeTet3rFh0SkaOeTSgIH/JlZsLDXmJE0o:AtNMnUkg53ElmoGUeqvhtOe3IHvZ+DXr","tlshash":"7fb2e005a0c37b52e336423696be1ff00a63bc26b7022e77385888bdd6858b10ca5dd6","first_seen":"2026-09-20T12:12:26.015042Z","last_seen":"2026-09-20T12:21:54.064246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/154/900/620.jpg?hmac=Zi-phnBFhItv-_KykX2M4u4T7tUO590Py9jSA4_cAYE","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.220Z","timestamp":1789906884220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 03:57:35 GMT","end":"Sat, 05 Dec 2026 03:57:34 GMT"},"fingerprint":{"sha1":"62:72:45:78:AA:BF:E7:C3:8E:73:1F:06:99:A1:57:CF:2C:43:7A:B4","sha256":"CF:53:F2:AD:9E:B4:65:DB:75:23:C6:69:D7:83:5D:84:75:CB:0E:D2:E3:F9:04:10:8F:A2:94:62:BB:C2:86:F4"}}},"request":{"raw":"GET /id/154/900/620.jpg?hmac=Zi-phnBFhItv-_KykX2M4u4T7tUO590Py9jSA4_cAYE HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://t-dominion.cam/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"154-900x620.jpg\"\r\npicsum-id: 154\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 912\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789906884.250848,VS0,VE1\r\nvary: Origin\r\ncontent-length: 41138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41138,"size_decoded":41643,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 900x620, components 3","md5":"237a4924ecb98c31513115ddf891e5e5","sha1":"bb2fe78860434e26612ce12d9024f81a10eef5aa","sha256":"f253379178875a091e6b37a8eb87bc832bb91d6369548bf5e356e54eeccbc71e","sha512":"45769a0f660fc97766db15aa1bbe3056581c01a8fd40c8e3641146f6ada457546f69a962e0012a04159b58676b1b88b24bd167c7bcd231f991faebbb4370d544","ssdeep":"768:xNjVjdQyJX+a42u+toEWEr73YI8dWNuKaumD0t04uHdQ/9qGpWtwE3g1nhPq:xJVR82bnWC3YFUaBD0tWHi1SwE3g1hPq","tlshash":"d503f15252c68c94fb791a3ce6cc6121af420511aa5f823772dbb963cfb2d95c90632c","first_seen":"2026-09-20T12:12:26.029798Z","last_seen":"2026-09-20T12:21:54.06485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/gb-support/600/400","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t-dominion.cam/","date":"2026-09-20T12:21:24.017Z","timestamp":1789906884017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 15:24:13 GMT","end":"Mon, 23 Nov 2026 16:24:00 GMT"},"fingerprint":{"sha1":"5A:EF:F3:B0:B2:5F:E2:02:5D:0F:28:21:71:D5:9C:15:92:C2:38:93","sha256":"41:45:AE:FC:1A:DC:92:78:43:FB:41:04:5A:12:26:D0:97:74:F1:9D:C3:56:77:A8:9C:12:CB:49:99:61:FF:12"}}},"request":{"raw":"GET /seed/gb-support/600/400 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://t-dominion.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 12:21:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/360/600/400.jpg?hmac=RWbT381yiGwcuoZURREljRcfruKeYYmUgnCNHYlDiYI\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xYkXJbQKL9zx3szUpvM0RONS%2B7G5slBaTwBUXLt7lA6ipqvp1is5FYp9Dra8QaKIYji7yfaUjFgFsSdH55foxKjw2pRoUXoS5%2FQ5UIuYTZuwTPkD71VduN5Sd89i2E%3D\"}]}\r\ncf-ray: a3e0ca29a8f449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
