{"report_id":"3a2f98be-7bbf-42d9-8f7c-2d2532110060","version":6,"status":"done","tags":[],"date":"2025-08-19T12:48:35Z","url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"title":"Lido"},"submit":{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-23T12:48:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2025-08-13T16:59:01.771323Z","alert_count":0,"request_count":3,"received_data":132054,"sent_data":1533,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"heyleia.com","ip":{"addr":"54.82.153.20","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2018-04-10","domain_rank":0,"first_seen":"2019-03-22T10:33:22Z","last_seen":"2025-08-17T14:37:54.584463Z","alert_count":0,"request_count":5,"received_data":69340,"sent_data":2141,"comment":"","tags":null,"fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"mod_wsgi:3.5","description":"mod_wsgi is an Apache HTTP Server module that provides a WSGI compliant interface for hosting Python based web applications under Apache.","website":"https://code.google.com/p/modwsgi","common_platform_enumeration":"cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*","icon":"mod_wsgi.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.61","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Python:3.6.12","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Amazon EC2","description":"Amazon Elastic Compute Cloud is a part of Amazon.com's cloud-computing platform, Amazon Web Services, that allows users to rent virtual computers on which to run their own computer applications.","website":"https://aws.amazon.com/ec2/","common_platform_enumeration":"","icon":"Amazon EC2.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":3,"received_data":9149,"sent_data":1386,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-13T15:20:17.649055Z","alert_count":0,"request_count":1,"received_data":53672,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-13T15:10:36.82984Z","alert_count":0,"request_count":2,"received_data":47893,"sent_data":1086,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-08-13T16:12:30.021605Z","alert_count":0,"request_count":1,"received_data":96378,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2025-08-13T17:54:29.546352Z","alert_count":0,"request_count":1,"received_data":37774,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ldo-finance.eu.com","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-18","domain_rank":0,"first_seen":"2025-08-19T12:48:36.7791Z","last_seen":"2025-08-19T12:48:36.7791Z","alert_count":0,"request_count":26,"received_data":5985162,"sent_data":16818,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"BootstrapCDN:3.3.5","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.1.25","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6baa03b13a625112057ec5ffa8098f2","sha1":"fa0fb17a391b8b446ed135caa803e77ce7e39c59","sha256":"dd1387b53b2ea8266053c13675c9ac604f96611eb7345727852c789099b5aa69","sha512":"b753eb155f7bac5bf5521871c54e5c9837e18e84cf7d5c0a0608397f9d4b61c68be57411a1e532e2e115c069b83e2fdb592e542be5546d362acee67dae8433ae","ssdeep":"","tlshash":"37a0027d965b36119631406023488591f61410438095b790304d55504f34748c804306","size":59,"data":"","first_seen":"2023-03-11T10:39:16Z","last_seen":"2025-10-11T14:52:48.738265Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"843512f2d31ea9c2b0a82b15f71540a0","sha1":"210694cf065a69206634cd09eaa0d2a9c60195a9","sha256":"b9e64feed84de11369146a2dc423d32f20540d71d90b05b373fb1079ef515bc9","sha512":"b426773bb51a8b5ecbd8809edbbc215cfc58a4b68d9f78564f3bc4d23ed5a49c7074f14bb32d8f8a62ad8f4c3959cbab6091f32115a1878e14c375d269c7128c","ssdeep":"","tlshash":"aa4126fcb2be14e04137747b92fb80882d69103b468add80b42dded80fd1644e91a97f","size":1931,"data":"","first_seen":"2023-03-11T10:39:16Z","last_seen":"2025-10-11T14:52:48.745351Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heyleia.com/js/analytics.js","fqdn":"heyleia.com","domain":"heyleia.com","tld":"com"},"ip":{"addr":"54.82.153.20","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84cebe71427c323b3df9758e21d44a55","sha1":"15da2e84bb30c8d132f82ca916838b7d37c078b7","sha256":"9705a46d624bde1e2fed926dc8905b1140e119b1038d0d8a41b2275a229f6e6b","sha512":"e95bff5960b7a80ef2dc9a00008d29b2c9499f69421ba6c203578ea91b1611bbda3158a9080b888018b0a9ee680f6805b2815b7f5f1f43fb0c6bd21af7a01779","ssdeep":"","tlshash":"8ff0df4d38fe50a92133b832053fa50830337503140aae003b4c62a05f5ed699563ae8","size":542,"data":"","first_seen":"2023-03-11T10:39:15Z","last_seen":"2025-10-11T14:52:48.505265Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.easing-1.3.pack.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"def257dbb0ab805c4996fd8abb1a6b49","sha1":"55d99c8d1e3e5867724a274df57ad05e3168a5cc","sha256":"9a7f76fdc1930049302dff8d3cb5e6e0cbfcf8feb6d1b1a06ef16a7445b05111","sha512":"839ff0c6768895a10707b89a361e83c7f992bd252fe86a6419a75e30696abc78b5f044baa3bdf56a4440d64bffd6325f384d98c27ac057c5543df9a51cfc127a","ssdeep":"192:pl+Or8ur83V33R3hqRGuFMiHUT3KFfRYOr8ur83V33R3hqy:zZr8ur83VHBh7zaFNr8ur83VHBhb","tlshash":"56d1c70f238c2756869522fdaa8a2f91e105606c3e1d2d03f89e71865eb735f51bfd18","size":6717,"data":"","first_seen":"2023-03-07T12:05:05Z","last_seen":"2026-08-13T15:56:17.048767Z","times_seen":1225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.mousewheel-3.0.4.pack.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b0a821567b463e70bcc1e90ed2bc9b6","sha1":"2db79bca5a365b8f631a995662e4fcb80468cb48","sha256":"1b6d02f909ccab91a8a6b820a8e231e8581a3dffbe3acf9ec435f7871e7a019f","sha512":"f645c809aa4f1a510c34a0da502e3a92fc92a2e18b1679f810d6fca55a9ccf97b38c4e61e209aff6ba942b3c03c98a7551a839ea478bc1d1d4201b6509e15884","ssdeep":"","tlshash":"33212004fe0c14e7429aebb2915f2303b1bad4b3a0536c9aa4744cc02b50dc95761d1e","size":1279,"data":"","first_seen":"2023-03-07T12:01:51Z","last_seen":"2026-08-08T22:35:40.676506Z","times_seen":796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d33b79de1420c17e48209a9131b25ea0","sha1":"49ab1bd5cc167d0f8a62c6c5f6c9293219c9e26d","sha256":"76067d77e066cb2fde2ebbb215b589a36c00e22a493027d662ecc84e31fc162e","sha512":"8e3844220e495df3617c42ae98afa5308b3e85fcfc8e8a922eabfcf5941827a758618c5260cbdb96636f9357385fcf7a0da5ff546ab72dc3a4b2515beafcc2fc","ssdeep":"","tlshash":"17716c8eb5eef12443f933f4696b2526f9585cd2380d4863d45e888db83835c913f52e","size":3561,"data":"","first_seen":"2023-03-07T01:10:34Z","last_seen":"2026-08-14T21:53:40.241481Z","times_seen":4576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b5ecf72546777b3bd938ae976935748","sha1":"914c45dcecb73c5f4270d939b77ae07db0371a85","sha256":"b9e565cb79608b43a5b94d3c4e3a4eac38018b2ae561c71f71edb02bd2045a3b","sha512":"44cfff6f5e187cc0b236ce9c97a84b4dd9723570e432049e371307e09b2930888b33cb986a2c2d97182e2492de26c9feaae1fd41298088ee46e80ddef47e6ccd","ssdeep":"","tlshash":"4db0022d78ee5201053331992a3fd5047f77742f720bda407a4c69d44f7a629a706a04","size":103,"data":"","first_seen":"2024-11-18T18:39:38.225464Z","last_seen":"2025-08-20T23:15:51.258075Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e606be8d6a6007e24454d9e17eaf4f","sha1":"01a7a6021eb2a978cdf9640ab71b65623aac95cc","sha256":"5d3958b07d4ac577943d03c5e51f03fddb68a221b283ea694c5fa5302a065370","sha512":"49348ad8c607765cac4bf8eb0e92e3797faf4144336adc041306ad4bab114863616e885c92c5788514fc3f3e32e30715654ce07c332e771467c2f659bb2ddcce","ssdeep":"","tlshash":"18c0122ccd4769a07e3004101324f740a50050074082f34034ce13008f3438fc800743","size":134,"data":"","first_seen":"2024-08-20T11:01:54.288284Z","last_seen":"2025-10-11T14:52:48.756209Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3210bca87de6cffa81985fe97d129fee","sha1":"8f979ef50ce3e326dc3e02d717d4b5f183c1d763","sha256":"990a0c28c1f8d164c7a83fdbfe1dcf5cb40ce815efa80c83998f4d21434a8e74","sha512":"27bef1270ba523e00af744d77d8de2cf2f9c2eba7cd35a3418e48a832dda971ff5dc2f17a4de309bee2890e0c565b2a14261190ac62cf20a2597994f4602d30a","ssdeep":"","tlshash":"944146bdb1ba28e00137747b97fb81842d69512b464adc80b43dded40f90744b91aa7f","size":2211,"data":"","first_seen":"2024-11-18T18:41:32.685894Z","last_seen":"2025-09-03T18:58:17.854477Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79f6ac0d55eb14648ee02507b7a37eb8","sha1":"dfdc1f2d4e3c9391819d2bc7dc43dde6f9e302db","sha256":"6e4687a9eef7fcb76be89cd3a542727b3c5319b4775a0426bec1ce496bae0f0a","sha512":"8d9ebda0fb92b101ce1eaf7994488631fa7cfdce043bbaf2fbd363a65ac0fe95ea8558519ea270f7d4141225a15cfa7393117d109ebff39a19c8754a43f3c966","ssdeep":"","tlshash":"06b0222e30be02882233a0be0e2bc008280338033803ec803a0ce8c00f0cb20028fa80","size":120,"data":"","first_seen":"2024-08-20T11:01:54.290133Z","last_seen":"2025-10-11T14:52:48.775914Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9450ad67c55b6f711253fdea0ae1d71a","sha1":"8d3645116e7bf3cd0bd59b314dcd12a45850ed1b","sha256":"d949f357aeffa7aef8af5d671a71a5dc57b19f5609ef047a370fc9d38844fb22","sha512":"28f0fd31a3c41ca3186bc8634c5395fbaf33e180ec925f0d413a552c9ac4d40bba0edd1ce385c7c091029e0592aba1e681a0b49d23f337267f0f886b11391181","ssdeep":"","tlshash":"71d012066c9986512c671511073be1001c15751b0903e8103def16d04f0a60ed116e49","size":224,"data":"","first_seen":"2024-08-20T11:01:54.292701Z","last_seen":"2025-10-11T14:52:48.796101Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.easing-1.3.pack.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"def257dbb0ab805c4996fd8abb1a6b49","sha1":"55d99c8d1e3e5867724a274df57ad05e3168a5cc","sha256":"9a7f76fdc1930049302dff8d3cb5e6e0cbfcf8feb6d1b1a06ef16a7445b05111","sha512":"839ff0c6768895a10707b89a361e83c7f992bd252fe86a6419a75e30696abc78b5f044baa3bdf56a4440d64bffd6325f384d98c27ac057c5543df9a51cfc127a","ssdeep":"192:pl+Or8ur83V33R3hqRGuFMiHUT3KFfRYOr8ur83V33R3hqy:zZr8ur83VHBh7zaFNr8ur83VHBhb","tlshash":"56d1c70f238c2756869522fdaa8a2f91e105606c3e1d2d03f89e71865eb735f51bfd18","size":6717,"data":"","first_seen":"2023-03-07T12:05:05Z","last_seen":"2026-08-13T15:56:17.048767Z","times_seen":1225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a1cdcdf6669ae0edbe2c776a9a22846","sha1":"41aa61537b141b918714b04a6803009040608141","sha256":"af5dc4b5196f946790e0f9a81d89a5900c3c67e4a6e6447df55c7b4c7d832d2c","sha512":"f6810edae5a51b236b6b36a3dbff739618c6671fffa4e3c1383a110a9423aef6fd1dbb313e2db28a0ec6b35486edf35d66f88864c6887a44246b42717939ee90","ssdeep":"","tlshash":"0911bb4879e652523c1b62211b3fa114353d790f1743db5039bf23e14f0195da54ddcc","size":866,"data":"","first_seen":"2024-08-20T11:01:54.297082Z","last_seen":"2025-10-11T14:52:48.805992Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-latest.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-14T22:43:03.702609Z","times_seen":56067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4becdc9104623e891fbb9d38bba01be4","sha1":"6c264e0e0026ab5ece49350c6a8812398e696cbb","sha256":"4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327","sha512":"2b5aa343e35c1764d83bf788dcceaff0488d6197c0f79a50ba67ef715ad31edc105431be68746a2e2fc44e7dae07ed49ab062a546dcb22f766f658fa8a64bfa5","ssdeep":"768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm5VCoFXflR8Gf3ZsbQ:4875vhqKGvlp3ZsQ","tlshash":"16f29606b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","size":36816,"data":"","first_seen":"2023-03-07T01:06:46Z","last_seen":"2026-08-14T20:31:42.64266Z","times_seen":18377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2552c06756217deca042aa862909dbe4","sha1":"ad213e50da7a725bb354575d184d37b78baf09d9","sha256":"54a3925773a9b81858a0287e11cb46da3617fbfb199a92693a2c452197af4484","sha512":"fab30ece2c85971cb12abc17fd5a75efacd03be6cd3e82fad18be8844ad63d268c7f6471e9ca8555a6af42f85eb1224cab7acc0f7b287ba819f2bbec913eb179","ssdeep":"","tlshash":"85012e9af4ed44901da7282c153ea304383164071e0fbe01bdbd25104f31e911d7eecc","size":669,"data":"","first_seen":"2024-08-20T11:01:54.298181Z","last_seen":"2025-10-11T14:52:48.817606Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heyleia.com/js/swal.min.js","fqdn":"heyleia.com","domain":"heyleia.com","tld":"com"},"ip":{"addr":"54.82.153.20","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe0f18cd4d5f1d03dd247211c5667669","sha1":"99e239bbca743fe70220e684ebe98e57ffacd4e4","sha256":"15211e0be73438987ed05236dc4ce90962f7c46452427364446576505e66697b","sha512":"a2b27f39c521ae136483cc2036b7b9946714272863d49b28b7f4129d128a8abcbc92c1af0296c70446eaec06ccb134afe0b9e77d1dcd49a8c240516c1067bc8a","ssdeep":"384:/BLa4qL1li0jldLUuuRcdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUodNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"b4031996758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d10a7f1b","size":40802,"data":"","first_seen":"2023-03-07T01:10:29Z","last_seen":"2026-08-12T01:17:37.35507Z","times_seen":1116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.mousewheel-3.0.4.pack.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b0a821567b463e70bcc1e90ed2bc9b6","sha1":"2db79bca5a365b8f631a995662e4fcb80468cb48","sha256":"1b6d02f909ccab91a8a6b820a8e231e8581a3dffbe3acf9ec435f7871e7a019f","sha512":"f645c809aa4f1a510c34a0da502e3a92fc92a2e18b1679f810d6fca55a9ccf97b38c4e61e209aff6ba942b3c03c98a7551a839ea478bc1d1d4201b6509e15884","ssdeep":"","tlshash":"33212004fe0c14e7429aebb2915f2303b1bad4b3a0536c9aa4744cc02b50dc95761d1e","size":1279,"data":"","first_seen":"2023-03-07T12:01:51Z","last_seen":"2026-08-08T22:35:40.676506Z","times_seen":796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-14T22:45:16.940267Z","times_seen":419783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d33b79de1420c17e48209a9131b25ea0","sha1":"49ab1bd5cc167d0f8a62c6c5f6c9293219c9e26d","sha256":"76067d77e066cb2fde2ebbb215b589a36c00e22a493027d662ecc84e31fc162e","sha512":"8e3844220e495df3617c42ae98afa5308b3e85fcfc8e8a922eabfcf5941827a758618c5260cbdb96636f9357385fcf7a0da5ff546ab72dc3a4b2515beafcc2fc","ssdeep":"","tlshash":"17716c8eb5eef12443f933f4696b2526f9585cd2380d4863d45e888db83835c913f52e","size":3561,"data":"","first_seen":"2023-03-07T01:10:34Z","last_seen":"2026-08-14T21:53:40.241481Z","times_seen":4576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.fancybox-1.3.4.pack.js%3Fv=1751816560","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f498afde9efbbd01bd02be3fc1fdb832","sha1":"c4816f5fa82ceb95c158b80404f5f0e6e410da2a","sha256":"1606f56e67b118447e2dba71022b7fbedeaaaafaf3e36252f453f10233324f1e","sha512":"efeeab87d0c8744239900cf0dcb8394b7b695ef5c3f613fe4eccfaf5c58a79911d8935d2c7542437dbbb2378a7441be88354a2702af24cba1f5a0645da4d59a9","ssdeep":"192:+/EdHapffnE2CywZrrdHy4qDP2Yz4NVSkHRSCscCynRMarqA4byryrbTHiZYyHFR:+/RpfvE2ycP10VotSl8Dykj0B","tlshash":"4ed2741b65f328368237b079cb9fa10cb33298275707dd66791c91945f806b80af9fe9","size":28768,"data":"","first_seen":"2023-03-11T10:39:15Z","last_seen":"2025-09-03T18:58:17.819535Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/fancybox/3.1.25/jquery.fancybox.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3f10d3c1cb64f2cc85cf64a4dd10a3c","sha1":"fe7f0514c04e07e668de79097e71237bdad0a224","sha256":"3f27849fbcb7ec27f0e71094e146f71be03c431f73a8c9c021a4462a39df5a22","sha512":"5b337d8bae972e150606f3f748417dbedd432ec20d1657e080629a99cfbd10a35860ac0c418167585332c0edf10daa1e91dd8bf8da49dfba47b09f9a05715431","ssdeep":"768:cDtJtwiLsbwzFFuuJZrBmbLJirzdUObGxBu7bb62z4Mt/iDZdabtrtXcGdQeFvtW:qtlfz/uu/Ab1/UgQnO","tlshash":"9533099b7720743582bb11a8a20f510fd537a41af50385b274bcd4d416e5fc922ebfea","size":52657,"data":"","first_seen":"2023-03-07T14:42:57Z","last_seen":"2026-08-11T07:29:28.643399Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2aa2de30414247003be46e9445f29974","sha1":"d46078baea4146fe8422e3349e6c50e8ec9cd040","sha256":"15d023de1fa152f63d2a24f9ab74a0082fed0c1a9f36bd49b5d45c3140835e43","sha512":"cb947d8204dfd5bf6429c94884ec56f2809f1aa7b72228d873a85abe1dee56fc231d2254b3428d83fa004a7032bf74aca33980bc65a2fb7cab2ca1a0b81ee82f","ssdeep":"192:B078ry2dU2Qp4YSqdfHQ77agr9cGLiQcj2SKtijhMOWUCLKfZ4yK9/nQbbagLif2:+EqWtdLtcGLWK2yrXPqWVsV","tlshash":"4662eb7f79f301358eab36ab567f93883420d0136e01dd11796c89604f65e9a683ebec","size":14882,"data":"","first_seen":"2025-08-19T12:48:41.426857Z","last_seen":"2025-08-19T12:48:41.426857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ldo-finance.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: application/javascript\r\nexpires: Tue, 19 Aug 2025 13:36:12 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cn%2BWV3E%2BIa1POSjBXrbs8JyPB%2BlDNU5FiAt23MtjKiAaaFCQCRARzT2sR8lIdf0RJ%2FcNraHFnuSrahJetN7KuivEvh%2Bk7b2ZVEMttnQQiz2xCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9719c38e9a1fefdb-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-14T22:45:16.940267Z","times_seen":419783,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/background-jlIkA-ZxA0X-iD5Px-ly0u9-1H2fR.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/background-jlIkA-ZxA0X-iD5Px-ly0u9-1H2fR.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:13 GMT\r\netag: \"59932-5ecb23f0-1603da;;;\"\r\nlast-modified: Mon, 25 May 2020 01:48:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 366898\r\naccept-ranges: bytes\r\ndate: Tue, 19 Aug 2025 12:48:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zjEcRH%2FTiCXj2mt6sNXRwBTbT8Uf%2F7oSJWu%2B3JiR6kggtGCRo%2FhO0zp3UriQNVTbIvebmtCySh6D89nMKNdMU2Kzk8Yh%2BjqnDtiOXmzXOHVcw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9719c393de48269f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, manufacturer=Canon, model=Canon EOS 6D Mark II], baseline, precision 8, 1280x853, components 3","md5":"9fb513b240a600c8f6e495882ebf5e62","sha1":"dcbf3d03f19226574d35cf1b29041517893c705e","sha256":"a111edf34148dc840e5993ee2a3b07aee1c450690fcabcb1cb5b2e4704543230","sha512":"bcdbc1b28276e1ed6468685d34f8b2f27c6f6bdcac39a9e884c48812fc701c0641bf9f90ac2ca4e6a8f3fb3da24610fdc933e7a7fb453d1869029d98a6c3b61e","ssdeep":"6144:fGb/mWexlrq6PlHrrBquFZaIlMjUDMNogyer7ovnMatt6329YcaKu04zDWhWI3:fQkVNtM+IIiH7yenovnMaW329YMWsN3","tlshash":"737423850468e36f36d6ea3b3174578f7e494dfe72065bd08a9eb00bf48a0a5f5809f4","first_seen":"2025-08-19T12:48:41.352478Z","last_seen":"2025-08-19T12:48:41.352478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":766,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.0.8/webfonts/fa-brands-400.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 01:25:22 GMT","end":"Tue, 30 Sep 2025 02:25:16 GMT"},"fingerprint":{"sha1":"DA:FB:BC:1A:2B:40:16:07:27:DC:AC:27:1C:83:0A:53:D4:C7:76:89","sha256":"9D:29:3F:F4:AE:5F:81:A2:AC:DA:2A:E5:E7:B6:28:70:ED:CA:69:A2:02:75:E1:B5:87:B8:5B:08:2B:9B:62:7E"}}},"request":{"raw":"GET /releases/v5.0.8/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ldo-finance.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 54488\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbdRDpGeRnx8QCfU6s2BS3jYjMJtYYOrMzcH%2FzNrNiIundhHgly2%2Fl61SQsJA15pwUFFqsYTkU%2ByCgq8x6cfKF1hgQvtcYH4iJJU7ufFq8RsDpo%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"e8c322de9658cbeb8a774b6624167c2c\"\r\nlast-modified: Fri, 22 Sep 2023 01:44:12 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9719c393ebbba61f-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 54488, version 1.0","md5":"e8c322de9658cbeb8a774b6624167c2c","sha1":"db06af71da4197a4e1bd553d124725a8081c13f0","sha256":"e7d4d5340bbe57a01d8f7992142e2763d438d5783890c76748306eebfa056a69","sha512":"08b7188c06da38cecc55039e33c3137ba7a84176f74591e30f456256105d6826269e2bfed2ba76a05813d0feff50890a54407032ebaefb2923a12c8b418d26c3","ssdeep":"1536:Cb5JT2yoQha/TxMu9GasXpW8SFweZOjpY1aPghqfBRsAh:Ct926+GaNDbMS1DEr","tlshash":"0733026841a41657faa5e0353cfb80281a1f6e04df79736e65e1738cad0fd0e9ce7a21","first_seen":"2023-05-05T00:33:54Z","last_seen":"2026-08-14T10:22:33.645941Z","times_seen":1734,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heyleia.com/js/analytics.js","fqdn":"heyleia.com","domain":"heyleia.com","tld":"com"},"ip":{"addr":"54.82.153.20","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heyleia.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 11:39:17 GMT","end":"Sun, 26 Oct 2025 11:39:16 GMT"},"fingerprint":{"sha1":"45:D4:EB:56:11:72:FA:47:E7:E3:4C:2C:15:DF:2E:DE:7F:04:82:A1","sha256":"AA:8F:0F:E1:A7:F2:45:1E:30:8E:3F:6D:FD:B6:93:E6:91:29:D0:FF:24:72:22:8D:D2:DA:EA:DD:8D:EF:74:F1"}}},"request":{"raw":"GET /js/analytics.js HTTP/1.1\r\nHost: heyleia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 19 Aug 2025 12:48:12 GMT\r\nServer: Apache/2.4.61 (Amazon) OpenSSL/1.0.2k-fips mod_wsgi/3.5 Python/3.6.12 PHP/7.3.30\r\nLast-Modified: Wed, 04 Mar 2020 20:28:56 GMT\r\nETag: \"21e-5a00d4508d934\"\r\nAccept-Ranges: bytes\r\nContent-Length: 542\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"mod_wsgi:3.5","description":"mod_wsgi is an Apache HTTP Server module that provides a WSGI compliant interface for hosting Python based web applications under Apache.","website":"https://code.google.com/p/modwsgi","common_platform_enumeration":"cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*","icon":"mod_wsgi.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.61","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Python:3.6.12","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Amazon EC2","description":"Amazon Elastic Compute Cloud is a part of Amazon.com's cloud-computing platform, Amazon Web Services, that allows users to rent virtual computers on which to run their own computer applications.","website":"https://aws.amazon.com/ec2/","common_platform_enumeration":"","icon":"Amazon EC2.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":542,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"84cebe71427c323b3df9758e21d44a55","sha1":"15da2e84bb30c8d132f82ca916838b7d37c078b7","sha256":"9705a46d624bde1e2fed926dc8905b1140e119b1038d0d8a41b2275a229f6e6b","sha512":"e95bff5960b7a80ef2dc9a00008d29b2c9499f69421ba6c203578ea91b1611bbda3158a9080b888018b0a9ee680f6805b2815b7f5f1f43fb0c6bd21af7a01779","ssdeep":"","tlshash":"8ff0df4d38fe50a92133b832053fa50830337503140aae003b4c62a05f5ed699563ae8","first_seen":"2023-03-11T10:39:15Z","last_seen":"2025-10-11T14:52:48.505265Z","times_seen":11,"resource_available":true,"data":null}},"time_used":836,"timings":{"blocked":359,"dns":47,"connect":95,"send":0,"wait":95,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:800,800i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Poppins:800,800i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 19 Aug 2025 12:48:12 GMT\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2410,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d906156d12a519c5ef3dfba12beec9e4","sha1":"ef00e6f55b53d9b2f1c854740991093f7941742b","sha256":"d28e11daa7aaaf7b6e032bfa2a5c0376d0510e65d1e280897b3332d47a8f46a2","sha512":"6a43aed8a496c762157209f3a770c6168f5a9aff03d7d474bcbe0c3d96fbf714766e2ae1b02d043490b640a0d06a84d65a617debc09e349178bb24bdd55eb56b","ssdeep":"","tlshash":"20418ae1087bd104ab871cc123df6d3aee0ea154a840e5b8abfd0cd8ad97c59037172d","first_seen":"2025-08-19T12:48:41.355604Z","last_seen":"2025-09-03T18:58:17.830861Z","times_seen":7,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":33,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/fancybox/3.1.25/jquery.fancybox.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/fancybox/3.1.25/jquery.fancybox.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15061\r\ncf-ray: 9719c38ed9cdc1a5-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e58-cdb1\"\r\nlast-modified: Mon, 04 May 2020 16:10:00 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 279613\r\nexpires: Sun, 09 Aug 2026 12:48:12 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gIh4HuJkjzGrWJIe06d%2FTAx0Cuche8FqCAPRRLfAHP4okHWiSfntZDXCna6n9ex2DPHj3oypXz5LjRu662RxNUdvXMTafuM11pZotBuRsTyoOPJMoq1EtRd%2FJ6H8AFBFOSocw14G\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52657,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32012)","md5":"c3f10d3c1cb64f2cc85cf64a4dd10a3c","sha1":"fe7f0514c04e07e668de79097e71237bdad0a224","sha256":"3f27849fbcb7ec27f0e71094e146f71be03c431f73a8c9c021a4462a39df5a22","sha512":"5b337d8bae972e150606f3f748417dbedd432ec20d1657e080629a99cfbd10a35860ac0c418167585332c0edf10daa1e91dd8bf8da49dfba47b09f9a05715431","ssdeep":"768:cDtJtwiLsbwzFFuuJZrBmbLJirzdUObGxBu7bb62z4Mt/iDZdabtrtXcGdQeFvtW:qtlfz/uu/Ab1/UgQnO","tlshash":"9533099b7720743582bb11a8a20f510fd537a41af50385b274bcd4d416e5fc922ebfea","first_seen":"2023-03-07T14:42:57Z","last_seen":"2026-08-11T07:29:28.643399Z","times_seen":303,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":7,"connect":14,"send":0,"wait":52,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/team/JacobLee.jpg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/team/JacobLee.jpg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 586690\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"8f3c2-5d3a2101-1603dc;;;\"\r\nlast-modified: Thu, 25 Jul 2019 21:37:05 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcwfI2%2FDNQbbXJzkizcmknFfd0Nu73mGcyQ72eSfclyBTNGWnFigkHMTHbZBdKFPyj70cc1QLBMV3ue9N%2FsB8uuUcpeYAthdJmqFrQyC%2BoBeXg%3D%3D\"}]}\r\ncf-ray: 9719c38e89ebefdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":586690,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 2000x3000, components 3","md5":"1d671f68c3bf817814705fc839e07c0b","sha1":"a7502662e53d73f878610599c40c8285bd6b025d","sha256":"6ffa4e468d8e7c070f20d89afd62b82eea370b959581ced946f6b43e6e7dfb8c","sha512":"8aa8d8b1f4508027e3c25b6c3d5c9092f1f08a32602f0cbcc5b44acc7982a2ea0dc523e48638a937fd89259dec0cd822350b2ca1f74c51bfc3bc73df85536b4d","ssdeep":"12288:NiFrs5+ErWlp8Xn3wMqlZS1Gx3Ee3NYP8VLc9Wipo9zPkES9vUNtc:krcrWX8H3q+1i0UYPzWiMzPkEo3","tlshash":"5fc42326d277409cf9e6d32017cf9e694dfa232c2d5b498d8a2097a50f736e5e624fc0","first_seen":"2024-11-18T18:41:32.613835Z","last_seen":"2025-10-11T14:52:48.53629Z","times_seen":8,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.0.8/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 01:25:22 GMT","end":"Tue, 30 Sep 2025 02:25:16 GMT"},"fingerprint":{"sha1":"DA:FB:BC:1A:2B:40:16:07:27:DC:AC:27:1C:83:0A:53:D4:C7:76:89","sha256":"9D:29:3F:F4:AE:5F:81:A2:AC:DA:2A:E5:E7:B6:28:70:ED:CA:69:A2:02:75:E1:B5:87:B8:5B:08:2B:9B:62:7E"}}},"request":{"raw":"GET /releases/v5.0.8/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ldo-finance.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:13 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40148\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2FuB6ckF67aLFJicXH4PRv64mJlui6Xq6AMp4c0Qf7TsTsEB6KfcG9BXc9zaKGN%2BymluSkJCAZvNTg72B0Dhwh4FSaJ%2F5spRpEwNfiYzkP6Wf2w%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"0ab54153eeeca0ce03978cc463b257f7\"\r\nlast-modified: Fri, 22 Sep 2023 01:44:12 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9719c3928815a61f-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40148, version 1.0","md5":"0ab54153eeeca0ce03978cc463b257f7","sha1":"6ec6d36cb2464b4e821cfabb532f310bd342601c","sha256":"434466b59545a8a1cac6ddb38197cdc6b35995a98c3f3812fb88d61b1c300dd3","sha512":"f4b03963386fc05a28adc3905cdd361905bdbad1386ec8d1e8a4440af778e311bb46b41da4b46288291ac3c174d727addd62ab7c27513bca34079c6a2c3cadc2","ssdeep":"768:Ne7m/za8SSvlojVj1lmEpnBxR+ug6bwKoAEjg7guFL/UFd9nwXk8M8Mgs6L:ymzRojVjmOBxRHtsg58PhB83","tlshash":"0503f1ae90ece50b926c4afd7adb0ffc7211914ed87ac2f1c8f4b5970f2aa028451255","first_seen":"2023-04-13T18:56:12Z","last_seen":"2026-08-14T12:51:08.691073Z","times_seen":5805,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":39,"dns":1,"connect":9,"send":0,"wait":135,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heyleia.com/css/leia.css","fqdn":"heyleia.com","domain":"heyleia.com","tld":"com"},"ip":{"addr":"54.82.153.20","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heyleia.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 11:39:17 GMT","end":"Sun, 26 Oct 2025 11:39:16 GMT"},"fingerprint":{"sha1":"45:D4:EB:56:11:72:FA:47:E7:E3:4C:2C:15:DF:2E:DE:7F:04:82:A1","sha256":"AA:8F:0F:E1:A7:F2:45:1E:30:8E:3F:6D:FD:B6:93:E6:91:29:D0:FF:24:72:22:8D:D2:DA:EA:DD:8D:EF:74:F1"}}},"request":{"raw":"GET /css/leia.css HTTP/1.1\r\nHost: heyleia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 19 Aug 2025 12:48:12 GMT\r\nServer: Apache/2.4.61 (Amazon) OpenSSL/1.0.2k-fips mod_wsgi/3.5 Python/3.6.12 PHP/7.3.30\r\nLast-Modified: Fri, 04 Mar 2022 14:43:46 GMT\r\nETag: \"2686-5d9658aca368b\"\r\nAccept-Ranges: bytes\r\nContent-Length: 9862\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"mod_wsgi:3.5","description":"mod_wsgi is an Apache HTTP Server module that provides a WSGI compliant interface for hosting Python based web applications under Apache.","website":"https://code.google.com/p/modwsgi","common_platform_enumeration":"cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*","icon":"mod_wsgi.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.61","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Python:3.6.12","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Amazon EC2","description":"Amazon Elastic Compute Cloud is a part of Amazon.com's cloud-computing platform, Amazon Web Services, that allows users to rent virtual computers on which to run their own computer applications.","website":"https://aws.amazon.com/ec2/","common_platform_enumeration":"","icon":"Amazon EC2.svg","categories":["Web servers"]}],"data":{"size":9862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4ccabc6b7a72e5a46360affe724f9594","sha1":"7437b99dd6b3a11397a8c3fcc840780355a94e5e","sha256":"725c181aaefe011231b35f54fc907e39aeedb4a88d6ad2b33f839be566d58c9e","sha512":"01142a906a4807ff6dc5deba54e64a726ae4ccc0d503d569e87d8edb6684c87a9dad5416abd66402a8ff709597a2366248ec334e92cf50e12331bff79b564830","ssdeep":"192:P33jAaS+V4iibU6ltlA+QvmhknY44Gkqte+4GPylyfqSjVGh6FKS6Fdy8F7RBxQg:/3jA5rW6Tt6FKS6FE8F7Cg","tlshash":"751274655abb3590e01bd494afbea728333e8027a61bcd687fdc72448fc63985052fc5","first_seen":"2024-08-20T11:01:54.252399Z","last_seen":"2025-10-11T14:52:48.529625Z","times_seen":10,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":40,"connect":95,"send":0,"wait":95,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/bIlM7-9ITbJ-TBQhQ-zxkKE-vukmG.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/bIlM7-9ITbJ-TBQhQ-zxkKE-vukmG.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8258\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"2042-62f5ff04-1603d2;;;\"\r\nlast-modified: Fri, 12 Aug 2022 07:19:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYGGmKTb9fxCm2UYm04ItxREzj2llmy9xGR8I0DS2P8fW1nEXcyPlhjbYYmQjdf7lfuz5ENaJwoCJl%2FqJNITqZhSgWaRz6MWKoFX72OlCwqtJg%3D%3D\"}]}\r\ncf-ray: 9719c38e79ccefdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8258,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 525x350, components 3","md5":"91835e0e97e85519af55596532b50440","sha1":"b4871e802b3bc611e60b969464e503d2b0b9d1fe","sha256":"1c7cd99f51d1a4991c575feffe622fb63974e5146f336c717201f1c645fdd975","sha512":"750053c88f3a1a34904c2c6eee6cb4e65b4c093bd42e57805e203d13bc8046930b14fc30e44cb0384b06e0ef964e3493d939972775307e64eb4da7a5f898a9ea","ssdeep":"192:RIwNXTZvAT28l/rLnL1W7vGakYlYL/P7+lUZY0:xoT2+Wx5S6lUZV","tlshash":"d9028f5f6793dbf9dc7700be11055b283fa9ba024ba54936b238e3ac15291d9cdc09c3","first_seen":"2025-08-19T12:48:41.360346Z","last_seen":"2025-08-19T12:48:41.360346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/yrZ5f-llXfO-D59Et-DiFgo-mq2CQ.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/yrZ5f-llXfO-D59Et-DiFgo-mq2CQ.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50021\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"c365-63de58d3-1603d6;;;\"\r\nlast-modified: Sat, 04 Feb 2023 13:08:35 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoO0b2eQEQoOem8wGFD4pXB%2BLMQFssrSsCC8Lmvyma1sy%2Bn5B1Z58LmMgXFE9rWCp0vRkqoXcs9FVEIk2hYY2tR25d6SmAU2%2B%2ByHJpJCqhAEUQ%3D%3D\"}]}\r\ncf-ray: 9719c38e79d7efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50021,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 525x350, components 3","md5":"d8606ac581581337ba11a47db6b93800","sha1":"ec5c9f68afc570632da4b4123f988459a6115848","sha256":"f1733f57a4254f855c9d50b337bb0ccbad3ef0b5169d1438ab1f16a97ce76403","sha512":"71e3d44c828adecafa64d99735a85164d3b716df984882f258ae07d91285eda337a1f832f99df55a583c7cbbfa3f6fe8cb301e613ef4c55a5f17cac348450b79","ssdeep":"768:AY8QW2R6ThKr+9yKKFtP8Mxcg1zt32NimzY7xffgOQ0PJMYmfKzhPF:AYArKCitP8MxcoE4xfYOPVaa9F","tlshash":"382301b0a27d8c03e919fafd49cc4e648efef3b4ef1825444532a922dad66d45c529c2","first_seen":"2025-08-19T12:48:41.361049Z","last_seen":"2025-08-19T12:48:41.361049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Lato\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 19 Aug 2025 12:48:12 GMT\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":818,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"eea785df1b396e1dbb20ff05a0e3f111","sha1":"9b7e29ec5e9c31ee5a594e3d82686fe21528de34","sha256":"83a9c509e17d3de7efdb3110dd529a539c1c46a5577fbad177ca57584b7ec851","sha512":"bf1b871557a7f4daaf401df69266d6b41501e914b7c107289782b22c3874091e39b047396cf2abfe4a342f9d3e5f2d45a138cd6cb9758f6c030419a0dfe2c88c","ssdeep":"","tlshash":"8001ce91056ba108db870cc213cd7e32ff1e629064499934eefe14d8bca7c698321b0d","first_seen":"2024-10-21T21:43:20.591364Z","last_seen":"2025-09-16T20:00:49.011809Z","times_seen":848,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":33,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.mousewheel-3.0.4.pack.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /lib/fancybox/jquery.mousewheel-3.0.4.pack.js HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 589\r\netag: \"4ff-5d49ab94-1603e6;br\"\r\nlast-modified: Tue, 06 Aug 2019 16:32:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ci6n8SDsw6S7BSX367qFZk4m8AjDd%2BWaxqnOL5xgl4ryShKYvBvfmvtzgO%2BcbJrrYsaEzuxFrq9sqEB3sDeaCsD3r41BZ5ViCKXHOS%2B5aRkOQ%3D%3D\"}]}\r\ncf-ray: 9719c38e79b8efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (528)","md5":"3b0a821567b463e70bcc1e90ed2bc9b6","sha1":"2db79bca5a365b8f631a995662e4fcb80468cb48","sha256":"1b6d02f909ccab91a8a6b820a8e231e8581a3dffbe3acf9ec435f7871e7a019f","sha512":"f645c809aa4f1a510c34a0da502e3a92fc92a2e18b1679f810d6fca55a9ccf97b38c4e61e209aff6ba942b3c03c98a7551a839ea478bc1d1d4201b6509e15884","ssdeep":"","tlshash":"33212004fe0c14e7429aebb2915f2303b1bad4b3a0536c9aa4744cc02b50dc95761d1e","first_seen":"2023-03-07T12:01:51Z","last_seen":"2026-08-08T22:35:40.676506Z","times_seen":796,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/zIEoJ-MIZLM-krJLm-SpG1y-chh9H.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/zIEoJ-MIZLM-krJLm-SpG1y-chh9H.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10051\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"2743-6449b2ed-1603d1;;;\"\r\nlast-modified: Wed, 26 Apr 2023 23:25:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXfPARpSyVCcuRUbtj0uFAob5jDVCSYXrbyLOZUYth4UP1K6xq8GTXnd7jyysihtuVzVrjKqrqzIj6j4J7sIbRJwAc%2BC%2Bz2zZaBHyUtBsQzLYg%3D%3D\"}]}\r\ncf-ray: 9719c38e79c8efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10051,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 233x350, components 3","md5":"86730edfc6da953540ff4723ef2628b9","sha1":"7e8c011b780fcd0a6de9fb8afd089c8284a3a28e","sha256":"1e277275a33ac34554d47c31843d1aa87fff62677f40a2cf5da661ac73f47edd","sha512":"ac8e8e209c92005aa6646007dec6efd2e25a8f8b51263c40fc2d1dfaa317a90a616c534a491c71469c541c35142e2f3bcd08eebbfcafab5009f82ae13bead98c","ssdeep":"192:d4UJUgKmcC7H5WNbc3cvQmKvWEkfFBW7yC3GOy8g0ux3j5IyVEhN:GmX5WNbsXmKvYFQ7ychux76hN","tlshash":"9c22c0cb0f130a75e94e6df8d9923f3213a37d587c29954b7db06a74b22e1b42c04ca1","first_seen":"2025-08-19T12:48:41.363405Z","last_seen":"2025-08-19T12:48:41.363405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/team/LindseyCampbell.jpg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/team/LindseyCampbell.jpg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 618599\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"97067-5d3a2102-1603dd;;;\"\r\nlast-modified: Thu, 25 Jul 2019 21:37:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hz1vWdrgbJ0C%2FTGVPD%2FJ4hBGM89QuLgoV5mAnLBlLnsdBTbgHHusqpjcQPWWPqVVDu8kgusyFo9uriu0nxG8mFpdBs9tN8LLyOV6o1W9c30SbQ%3D%3D\"}]}\r\ncf-ray: 9719c38e89fdefdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":618599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 2000x3000, components 3","md5":"7e1dfc139f745d3c21bc05b27036a7bb","sha1":"e2f5d367fb47234062013f6933e0b41ce8a0a5af","sha256":"7ecb28a901215cb231552711e8e11de882867d414a4ee8f6a939a85c299434dc","sha512":"044f78064bcbb93e08dde2c459a136fb51139b5d07d934d1683be05adc1ec30cdfb9ac834c6307a8b6794ceda6d48ccf6ac89b8dd76e3ac67065ab487d89e221","ssdeep":"12288:lqskkg8ITeiHKPeAYlnPfn8gR3luq4CUzp+RY4lqKXJ3rEEOtSxFPSTSPyPfUP3n:ssvEqsKp2P7ISY4qKZ7JISxESaHG3n","tlshash":"01d4235bc7c8651ce27dd73381dc0bd9e9b06c8c786a881207ad1b4a4196e44cf69afe","first_seen":"2025-08-19T12:48:41.364322Z","last_seen":"2025-10-11T14:52:48.525858Z","times_seen":6,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v36/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVtapbCIPrE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/raleway/v36/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVtapbCIPrE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ldo-finance.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22644\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 21:01:43 GMT\r\nexpires: Fri, 14 Aug 2026 21:01:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402390\r\nlast-modified: Wed, 28 May 2025 17:01:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22644,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22644, version 1.0","md5":"089c63b88497de0960ad609666dd9715","sha1":"a5ac65159831b3771934e2b9b5b11b2a00906e70","sha256":"12ba99eb125d1348c0ee4afe5ac74c30cb2d68eb25f17da934f94677545c89b2","sha512":"cd8ec0eb9830cbf4ddc61e197cc1cedbafba09861c2b98792ef5782417d7b198f2fcd7e01ccf208e5c5d9aada739c479ae0aaa08422b645798ed8aba63532b96","ssdeep":"384:GdvbSApADkrH1edpr91U/Pei4CpU11e4hZqYRuN3A/5WUDZWPcCuG58:Gv32IrH1edpr0nBvUqu1RIoWA+z58","tlshash":"85a2d1ee812e7487d7088cd87b673bd792d287b55f40363546e52421197533e7f1a232","first_seen":"2025-05-30T04:38:07.868673Z","last_seen":"2026-08-05T03:27:12.14548Z","times_seen":411,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":79,"dns":0,"connect":16,"send":0,"wait":16,"receive":5,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-latest.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-latest.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1762a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\nage: 2427678\r\nx-served-by: cache-lga21983-LGA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 55, 172735\r\nx-timer: S1755607693.611907,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":95786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-14T22:43:03.702609Z","times_seen":56067,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":45,"dns":1,"connect":14,"send":0,"wait":13,"receive":6,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:43:39 GMT","end":"Fri, 10 Oct 2025 03:43:37 GMT"},"fingerprint":{"sha1":"C1:BD:D6:84:57:89:FE:9E:6D:F9:1F:26:76:1D:7C:45:E8:23:F6:35","sha256":"42:6A:B9:E6:CC:53:CB:12:2A:7A:43:B8:3D:90:FC:5E:4D:CA:A2:E0:3D:B4:2E:38:10:A6:6F:26:86:7F:D5:A0"}}},"request":{"raw":"GET /bootstrap/3.3.5/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 9719c38ebd428b0c-ARN\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: US\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"4becdc9104623e891fbb9d38bba01be4\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-proxyver: 1.06\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/11/2024 04:26:41\r\ncdn-edgestorageid: 1070\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 753aacf53a30f3ef35a93d075f63f63a\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 1216760\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36816,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32034)","md5":"4becdc9104623e891fbb9d38bba01be4","sha1":"6c264e0e0026ab5ece49350c6a8812398e696cbb","sha256":"4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327","sha512":"2b5aa343e35c1764d83bf788dcceaff0488d6197c0f79a50ba67ef715ad31edc105431be68746a2e2fc44e7dae07ed49ab062a546dcb22f766f658fa8a64bfa5","ssdeep":"768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm5VCoFXflR8Gf3ZsbQ:4875vhqKGvlp3ZsQ","tlshash":"16f29606b23031a107efb1e1525b020a7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:06:46Z","last_seen":"2026-08-14T20:31:42.64266Z","times_seen":18377,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":31,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/6jUrb-9X6T3-fWBw3-EnGgK-uizVL.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/6jUrb-9X6T3-fWBw3-EnGgK-uizVL.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14303\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"37df-603e0bc3-1603d4;;;\"\r\nlast-modified: Tue, 02 Mar 2021 09:56:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFvFM0HaijAX59%2B0Bh0u7Tr0o39aUac0bp8cIm%2B5N8VUOzJBsKzfJSKDc2Cu8BAh7yoUV86VxQ0PEqNtuDVAW6LhcZ8kIBRmZ91vikfi7TOyBQ%3D%3D\"}]}\r\ncf-ray: 9719c38e79d5efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14303,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 518x350, components 3","md5":"bb4cc588aa4294b0d82f91d6b1ea815e","sha1":"2f24dfb914317ce4ebc2450bbf5879dd048d844b","sha256":"547c753a12bcc71969ea0cc296823478b4bcb95d4b708d15dd7df7f39281250e","sha512":"c7f36441921a08289c9eb955da0dd86985a5d865ab3f2f45a01e2ad2a2fd8a9b0bc2931ce96e5eaa1bb8ebc19bb6f5589f484404e53b45e729aac1205c6714a9","ssdeep":"192:1CSSlqDZhtz/T6ME6aomSAmnwK7PqDDyE2uzaIhnGEcBCT8M60i0rgK9qyO8TN:ASzz/mfSAmtPXE2uzaIRqBCnrrlqyOM","tlshash":"0b52cfa7ab0e2ee7e01d51f13b391f6676318faa5637dac3b920eec556107d2c92c044","first_seen":"2025-08-19T12:48:41.367429Z","last_seen":"2025-08-19T12:48:41.367429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.mousewheel-3.0.4.pack.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /lib/fancybox/jquery.mousewheel-3.0.4.pack.js HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"4ff-5d49ab94-1603e6;br\"\r\nlast-modified: Tue, 06 Aug 2019 16:32:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 589\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 19 Aug 2025 12:48:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvIUM3olXRBN9GZFxI9fle5p3g0a6Wgv6h5GpQ1yPCPTRRhKLa3k0fs%2BmiX458Z080NSm%2FU9GQ22KlagG6vCBc5s%2BR3rkrVrRy37TJ2TnLwGKA%3D%3D\"}]}\r\ncf-ray: 9719c3927e2c269f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (528)","md5":"3b0a821567b463e70bcc1e90ed2bc9b6","sha1":"2db79bca5a365b8f631a995662e4fcb80468cb48","sha256":"1b6d02f909ccab91a8a6b820a8e231e8581a3dffbe3acf9ec435f7871e7a019f","sha512":"f645c809aa4f1a510c34a0da502e3a92fc92a2e18b1679f810d6fca55a9ccf97b38c4e61e209aff6ba942b3c03c98a7551a839ea478bc1d1d4201b6509e15884","ssdeep":"","tlshash":"33212004fe0c14e7429aebb2915f2303b1bad4b3a0536c9aa4744cc02b50dc95761d1e","first_seen":"2023-03-07T12:01:51Z","last_seen":"2026-08-08T22:35:40.676506Z","times_seen":796,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/team/EricHernandez.jpg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/team/EricHernandez.jpg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1790015\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"1b503f-5d3a2101-1603de;;;\"\r\nlast-modified: Thu, 25 Jul 2019 21:37:05 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFtcBHzvSNfp6dddP2NpXa4QutDSJ5nuasQLgz33yQl6XDd7vrOJcPyIZMljXbUIoSWEJvw4EMh%2Bxysg%2BJekpBqX0FGeKUwpaEjnSvcVfokGXA%3D%3D\"}]}\r\ncf-ray: 9719c38e9a07efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1790015,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 2000x3000, components 3","md5":"1ac1dc252103b7e3ad9fd41daa7e0a08","sha1":"5d14f7d55976b8a23262664466d5b3da5ddd25af","sha256":"318b295b7e77fc666cce9e917263c97d03c93752f9b33025ffc2f8325025e926","sha512":"1203a738cddf714ff6130a72392a7d13af28bece710aac038585ffe75829c659a2b50f461530f010042a7f7398936b9101776b3cd4a3e55ef8c4c1c9b4256e68","ssdeep":"24576:cszdJZoL70+OupIC5Y9NTP8NBDQJ70rvMF3o:/zdgL7zs9NTwDQJ703","tlshash":"f52533d32a9fdca5994695ec00cffd7657378e0e13b46b9ccf101c1e92b91aa15b0a0e","first_seen":"2025-08-19T12:48:41.371417Z","last_seen":"2025-08-23T13:44:25.926524Z","times_seen":3,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.0.8/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 01:25:22 GMT","end":"Tue, 30 Sep 2025 02:25:16 GMT"},"fingerprint":{"sha1":"DA:FB:BC:1A:2B:40:16:07:27:DC:AC:27:1C:83:0A:53:D4:C7:76:89","sha256":"9D:29:3F:F4:AE:5F:81:A2:AC:DA:2A:E5:E7:B6:28:70:ED:CA:69:A2:02:75:E1:B5:87:B8:5B:08:2B:9B:62:7E"}}},"request":{"raw":"GET /releases/v5.0.8/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQQ3yNdyelgijziGOdDtrrzCzzFzWmkVEoJhBaka6g5Okl9FvCbasonypLY75IAvPagwp8E%2FLGehOa7sdeSJxt2szCyReeijTBQg1dOQjui4Huk%3D\"}]}\r\ncf-cache-status: HIT\r\nage: 1076142\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Sep 2023 01:44:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"265a36ec650d63e307e611cdf14d9b89\"\r\ncontent-encoding: br\r\ncf-ray: 9719c38edaf51888-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35359,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35179)","md5":"265a36ec650d63e307e611cdf14d9b89","sha1":"9dd5cb83054537ce98ea50690ad5a02350e2444c","sha256":"4080b83d8afc4487b8229308be2f196372bd2123613b46388048f14159f07181","sha512":"702d2d2660ba8eee11644037e0f51f59868b505e7d8dae5f4614d7852a0a9afe03e7ed5681c190997971532c0502bbec1ef9f6f9cc62119c27142d571e185301","ssdeep":"384:OT+rB31vx/jzQ6m4TrhHam31AKj9kQCQ/XaMIY3B1vlvuPnmQ/4A:P31vx/fQ6voU+KJkdQ/KM933EOQ/j","tlshash":"dcf23eb8e50d01d6a731c48bff82b36862bafb3cd5850d95f00e6d1c29d16a911c5fba","first_seen":"2023-04-10T11:49:11Z","last_seen":"2026-08-13T13:41:37.88449Z","times_seen":1145,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":46,"dns":1,"connect":12,"send":0,"wait":15,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/jQLt5-ZYP4m-tgAyL-0FXfY-OsoIi.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/jQLt5-ZYP4m-tgAyL-0FXfY-OsoIi.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31578\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"7b5a-5fa40912-1603d3;;;\"\r\nlast-modified: Thu, 05 Nov 2020 14:15:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VK0Ooi0dkeUQEeLwInsUnjvPRIxrqsz0V4Uew9iziFvFvvBopb2NO4AyLL5fFVKtzAGsBc17eWdPVkAqne6CmKEZlkAedZ3aWwL38%2BBsYHXjw%3D%3D\"}]}\r\ncf-ray: 9719c38e79ceefdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":31578,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 524x350, components 3","md5":"0e57a1530ba6e35ebd5b9a3be2fe19c4","sha1":"baa49b3123971b8123d31a7a67d2ee3f1dca925e","sha256":"59940bc0bc8e171e4f7800bbf87a9b9ab6e421b63ebd2670f022a24c96d9a56c","sha512":"f26684fdcb1d386c60cfe1a9cb45977327b49c25c92e093fcc79b979d429bbf5ef83ef8bcce8ca4425ea40d0efe8ddbcdaa7866b21879ed32fbe07381c53c574","ssdeep":"768:7wHADB3oA7LLlqVeaBxYN+8OjBOJXNcXaj2FFTU30xwN03:7wHA1YA7LY8VNGlmXNcKiF1OMK03","tlshash":"dde2f1b99b16d6a6f2064cb8a3ad1f063b43fa1f3c80ce80524963b4d6da5b44b341d7","first_seen":"2025-08-19T12:48:41.373052Z","last_seen":"2025-08-19T12:48:41.373052Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.easing-1.3.pack.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /lib/fancybox/jquery.easing-1.3.pack.js HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2106\r\netag: \"1a3d-5d49ab94-1603e5;br\"\r\nlast-modified: Tue, 06 Aug 2019 16:32:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fchhRKgYULCZ0O5q%2BO12ADBzetjrf95v6YdWZmPv4Ztr6t1tH8wiZUyfIRvuH3%2BHujviv5fpY66jjhjuvhpEa5yyqQ5WYr0O%2F05UrBB3tdQ88Q%3D%3D\"}]}\r\ncf-ray: 9719c38e79b5efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6717,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3199)","md5":"def257dbb0ab805c4996fd8abb1a6b49","sha1":"55d99c8d1e3e5867724a274df57ad05e3168a5cc","sha256":"9a7f76fdc1930049302dff8d3cb5e6e0cbfcf8feb6d1b1a06ef16a7445b05111","sha512":"839ff0c6768895a10707b89a361e83c7f992bd252fe86a6419a75e30696abc78b5f044baa3bdf56a4440d64bffd6325f384d98c27ac057c5543df9a51cfc127a","ssdeep":"192:pl+Or8ur83V33R3hqRGuFMiHUT3KFfRYOr8ur83V33R3hqy:zZr8ur83VHBh7zaFNr8ur83VHBhb","tlshash":"56d1c70f238c2756869522fdaa8a2f91e105606c3e1d2d03f89e71865eb735f51bfd18","first_seen":"2023-03-07T12:05:05Z","last_seen":"2026-08-13T15:56:17.048767Z","times_seen":1225,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/team/TimRoberts.jpg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/team/TimRoberts.jpg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 785000\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"bfa68-5d3a2103-1603df;;;\"\r\nlast-modified: Thu, 25 Jul 2019 21:37:07 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zt0%2FCF%2BGMcP0n57IbJ2UbcORufENEl9XhcfvmyA0GZPbdfXUUuWXC2bHn8DGiFgzTuN2%2BiNaMgLnC2mXJF6hu3P3WH1LpwHPOLyHEllXaDjSTg%3D%3D\"}]}\r\ncf-ray: 9719c38e9a09efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":785000,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1999x3000, components 3","md5":"bfe13aa425d365c8dd9c9c6e079aa9ae","sha1":"4cc95bab5e0b073cb947ee940c71595df340d5a0","sha256":"5b2e7498afa250f9ecdeec9a4ccc8f7099e32ff9dd01ad52bab1cf763ebd26db","sha512":"3d894ba5a316efb644d9c388bda65d3b8b29f39fe50d1d69a20fd9394c7c5c2f76619071efc43212bcc91ddc056ee64a10a64a63f73ff60e5db701324fc85139","ssdeep":"12288:SzbU3ANfcj8E+y7NqAb5Leq8bGE/aSUmoyB+xhamQmvA8BMb8DoBHwrksuoRR0+6:8IwKjxb8zjRQLaOabvGY+6","tlshash":"def4235bf09fa4c5e4942eb1f2dc0d4b7ed5df3c654617282a130b96ece34486a0f92a","first_seen":"2024-11-18T18:39:38.181399Z","last_seen":"2025-09-03T18:58:17.813136Z","times_seen":5,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/background-Na7hf-q1aoX-Hmu7s-QcKAy-ikWGD.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/background-Na7hf-q1aoX-Hmu7s-QcKAy-ikWGD.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:13 GMT\r\netag: \"27ec7-65decc2a-1603d0;;;\"\r\nlast-modified: Wed, 28 Feb 2024 06:01:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 163527\r\naccept-ranges: bytes\r\ndate: Tue, 19 Aug 2025 12:48:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61NL%2BwCHesZBNH0sQpXXsngWo7R%2FcEtY%2FNtEA1uk%2FqUV7Aqe22I81Aww2oWQ0kEY%2FpiR4C9tfZSxDr8wlF3sNkJ38KiP2WhwBQbiqmVWz6DDpQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9719c3922e26269f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"ddcbd8188284354f82a8815fec451efc","sha1":"9be7ac7539d71f1165a4b802a6cc65b84a09f5ae","sha256":"67a68b0700f6028eeda196b26f51d0dd8cd79d05614394486f6b3d85e53de8d2","sha512":"959e9cd055b79e721a23165a029a846a3aba2753facec2e6a5124b9c0efabd58b8d5fcb132a5ae570e08c49f99b658140062cf7f208f46ada957b063f5dae7e2","ssdeep":"3072:pvvx5zyCvnsJ9zZ3O7SrT7DDj6I+0F53kzBM+iP2B5+t+Xk0Ccy:pvvx5zdvnE9NiSn7/VJ+BWP9t+/zy","tlshash":"cff31268981891522973edf146b6068bfbad458ebc87d47b390453fc183ea4cdccf85a","first_seen":"2025-08-19T12:48:41.376069Z","last_seen":"2025-08-19T12:48:41.376069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":653,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heyleia.com/css/sweetalert.css","fqdn":"heyleia.com","domain":"heyleia.com","tld":"com"},"ip":{"addr":"54.82.153.20","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heyleia.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 11:39:17 GMT","end":"Sun, 26 Oct 2025 11:39:16 GMT"},"fingerprint":{"sha1":"45:D4:EB:56:11:72:FA:47:E7:E3:4C:2C:15:DF:2E:DE:7F:04:82:A1","sha256":"AA:8F:0F:E1:A7:F2:45:1E:30:8E:3F:6D:FD:B6:93:E6:91:29:D0:FF:24:72:22:8D:D2:DA:EA:DD:8D:EF:74:F1"}}},"request":{"raw":"GET /css/sweetalert.css HTTP/1.1\r\nHost: heyleia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 19 Aug 2025 12:48:12 GMT\r\nServer: Apache/2.4.61 (Amazon) OpenSSL/1.0.2k-fips mod_wsgi/3.5 Python/3.6.12 PHP/7.3.30\r\nLast-Modified: Mon, 09 Dec 2019 16:26:27 GMT\r\nETag: \"32fa-59947db747d28\"\r\nAccept-Ranges: bytes\r\nContent-Length: 13050\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Python:3.6.12","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Amazon EC2","description":"Amazon Elastic Compute Cloud is a part of Amazon.com's cloud-computing platform, Amazon Web Services, that allows users to rent virtual computers on which to run their own computer applications.","website":"https://aws.amazon.com/ec2/","common_platform_enumeration":"","icon":"Amazon EC2.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"mod_wsgi:3.5","description":"mod_wsgi is an Apache HTTP Server module that provides a WSGI compliant interface for hosting Python based web applications under Apache.","website":"https://code.google.com/p/modwsgi","common_platform_enumeration":"cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*","icon":"mod_wsgi.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.61","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13050,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"447d73bd7b3c34c3ba9cd57bf6f8e639","sha1":"87bb013b0adeb89b7d328fad7e7f5ca1f6b50b94","sha256":"d2d238c82da28bb6049e86ae5c998845d217f10a474a52f94908601914ec92b2","sha512":"b8475cd3b98e0a346c1de38a939bc49502b32e785f6d4e50a9f243b6486ef554d40307539c015c58923aaab3e00efd7de6289b7f0bd3ea247aa3285413ce5eb5","ssdeep":"384:K8t7DgOgFB9FstFKRF0PvFWFmwHH3CX1YtqemnERpazAh:fgOgFB9FOFKRF0PvFWF61YtjmnEnazAh","tlshash":"8e4233eb2df41648e76b835452de8f68633c9083691bec7eb7c010ae8f805d9519a752","first_seen":"2023-05-11T21:10:34Z","last_seen":"2026-07-02T23:34:31.464977Z","times_seen":26,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":362,"dns":44,"connect":97,"send":0,"wait":97,"receive":1,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heyleia.com/js/swal.min.js","fqdn":"heyleia.com","domain":"heyleia.com","tld":"com"},"ip":{"addr":"54.82.153.20","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heyleia.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 11:39:17 GMT","end":"Sun, 26 Oct 2025 11:39:16 GMT"},"fingerprint":{"sha1":"45:D4:EB:56:11:72:FA:47:E7:E3:4C:2C:15:DF:2E:DE:7F:04:82:A1","sha256":"AA:8F:0F:E1:A7:F2:45:1E:30:8E:3F:6D:FD:B6:93:E6:91:29:D0:FF:24:72:22:8D:D2:DA:EA:DD:8D:EF:74:F1"}}},"request":{"raw":"GET /js/swal.min.js HTTP/1.1\r\nHost: heyleia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 19 Aug 2025 12:48:12 GMT\r\nServer: Apache/2.4.61 (Amazon) OpenSSL/1.0.2k-fips mod_wsgi/3.5 Python/3.6.12 PHP/7.3.30\r\nLast-Modified: Mon, 09 Dec 2019 16:26:51 GMT\r\nETag: \"9f62-59947dce27621\"\r\nAccept-Ranges: bytes\r\nContent-Length: 40802\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mod_wsgi:3.5","description":"mod_wsgi is an Apache HTTP Server module that provides a WSGI compliant interface for hosting Python based web applications under Apache.","website":"https://code.google.com/p/modwsgi","common_platform_enumeration":"cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*","icon":"mod_wsgi.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.61","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Python:3.6.12","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Amazon EC2","description":"Amazon Elastic Compute Cloud is a part of Amazon.com's cloud-computing platform, Amazon Web Services, that allows users to rent virtual computers on which to run their own computer applications.","website":"https://aws.amazon.com/ec2/","common_platform_enumeration":"","icon":"Amazon EC2.svg","categories":["Web servers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":40802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40802), with no line terminators","md5":"fe0f18cd4d5f1d03dd247211c5667669","sha1":"99e239bbca743fe70220e684ebe98e57ffacd4e4","sha256":"15211e0be73438987ed05236dc4ce90962f7c46452427364446576505e66697b","sha512":"a2b27f39c521ae136483cc2036b7b9946714272863d49b28b7f4129d128a8abcbc92c1af0296c70446eaec06ccb134afe0b9e77d1dcd49a8c240516c1067bc8a","ssdeep":"384:/BLa4qL1li0jldLUuuRcdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUodNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"b4031996758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d10a7f1b","first_seen":"2023-03-07T01:10:29Z","last_seen":"2026-08-12T01:17:37.35507Z","times_seen":1116,"resource_available":true,"data":null}},"time_used":896,"timings":{"blocked":342,"dns":44,"connect":92,"send":0,"wait":94,"receive":94,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/EV9bk-JnPEY-TE9kL-yawuY-z5e3h.png","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/EV9bk-JnPEY-TE9kL-yawuY-z5e3h.png HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 538365\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"836fd-5c6c4860-1603d8;;;\"\r\nlast-modified: Tue, 19 Feb 2019 18:18:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiveIE77MrTRk%2BzGOyS7LeEc8g7TehV1dK9OApXygCXYj0JY8k18MgfJlOc7Dnprd%2FCF2NA2aeyMz6vncGylI1Y4S1AJg8lpKSZxf3jiOfiJCw%3D%3D\"}]}\r\ncf-ray: 9719c38e89e0efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538365,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 531 x 572, 8-bit/color RGBA, non-interlaced","md5":"09e8b3af015604e65531446856558900","sha1":"3a6db64d6d5e3bdd16cce9af6eaffbfe9b87e935","sha256":"c7066fdde758aa455625388ce20ccfa9fad7c87b00711cca258033ccb747714f","sha512":"de0859fd8f857ab5391bef25ca009a42ba25eb0d0b9da09405326615bb7db3b154aa7eb4f22822ffcbc2ff3880b7e9232421326dcf844b73d2d6e1d6401e89db","ssdeep":"12288:dXwbSCYSiix/X8Ltcggm8WafrzpjXio/il7WPawu/+1qm/138:pwbXYSii1XBXVQ7Qu/m38","tlshash":"29b42380c80ae7da9a072b4f91c75beec0d790d72a61d35601b2df10c5fe4f5963a74a","first_seen":"2024-11-18T18:41:32.606406Z","last_seen":"2025-10-11T14:52:48.532231Z","times_seen":4,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.easing-1.3.pack.js","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /lib/fancybox/jquery.easing-1.3.pack.js HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"1a3d-5d49ab94-1603e5;br\"\r\nlast-modified: Tue, 06 Aug 2019 16:32:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2106\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 19 Aug 2025 12:48:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqJ0wRC8nMuqzugwOgoVWeP0N79pESZfJ5L96To0Lhh8wcQJ5nwfyewOoHowJ%2FHMkt%2BxMJiBEVygEQkEDXd8NI2geUcJBqlWZgJh7AzNtg0tEQ%3D%3D\"}]}\r\ncf-ray: 9719c3921e24269f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6717,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3199)","md5":"def257dbb0ab805c4996fd8abb1a6b49","sha1":"55d99c8d1e3e5867724a274df57ad05e3168a5cc","sha256":"9a7f76fdc1930049302dff8d3cb5e6e0cbfcf8feb6d1b1a06ef16a7445b05111","sha512":"839ff0c6768895a10707b89a361e83c7f992bd252fe86a6419a75e30696abc78b5f044baa3bdf56a4440d64bffd6325f384d98c27ac057c5543df9a51cfc127a","ssdeep":"192:pl+Or8ur83V33R3hqRGuFMiHUT3KFfRYOr8ur83V33R3hqy:zZr8ur83VHBh7zaFNr8ur83VHBhb","tlshash":"56d1c70f238c2756869522fdaa8a2f91e105606c3e1d2d03f89e71865eb735f51bfd18","first_seen":"2023-03-07T12:05:05Z","last_seen":"2026-08-13T15:56:17.048767Z","times_seen":1225,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ldo-finance.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 13:01:03 GMT\r\nexpires: Tue, 18 Aug 2026 13:01:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 85630\r\nlast-modified: Tue, 02 May 2023 15:17:22 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-14T22:37:45.839268Z","times_seen":256797,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":101,"dns":0,"connect":14,"send":0,"wait":15,"receive":6,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/background-WEXlX-hrtvZ-fD9mF-0Cm8a-KsrBD.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/background-WEXlX-hrtvZ-fD9mF-0Cm8a-KsrBD.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:13 GMT\r\netag: \"36ebd-6673dd7e-1603e0;;;\"\r\nlast-modified: Thu, 20 Jun 2024 07:42:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 224957\r\naccept-ranges: bytes\r\ndate: Tue, 19 Aug 2025 12:48:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrUPWEcHy%2BUsC5mKikCJn1cCbljiPgLxNMkYWBFUaPeStDMy0TvahaOMxve%2BXsi2LJDCQOyYZLk3NvB1P7MQaOqbXDIUtDm%2BLVA2v5iT6KryKA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9719c393de49269f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":224957,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x853, components 3","md5":"5da7596cc117c33c6070cd87515ad02f","sha1":"20fb729d604861e6d3f19c9399f2109fef0292f1","sha256":"8035545770b709e74509f4ee37b9cd210e43a25c5cf6b99b6f3dd1e273e463b4","sha512":"541cd812ec9422030f1ec934f2b5b1618c806ab6b14e8542341ea1d5e291e18c31cb5fe8973541b6d352fe03fd3534b3f67d956ca4f742dc89759452fa739f81","ssdeep":"6144:Utbo20DFsySLbQlKWeaHzd12NLSzrYPq3IR1eD+nf:Utbo5WUUFsdq2ocCnf","tlshash":"53241230c87db414612dac6ea8689f00de7f5f9f74edd918ee3acdb26482d140d8d85a","first_seen":"2025-08-19T12:48:41.379156Z","last_seen":"2025-08-19T12:48:41.379156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1263,"receive":548,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/css/bootstrap.min.css","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 16377\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"1a511-686a99b5-1603cd;br\"\r\nlast-modified: Sun, 06 Jul 2025 15:43:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTXS16DMAlSLZepOB7vp9qlSYHhJdstpCzi%2Fn2xehJ9oubYYUgEuNJtUWiObtMhT9GYnbSJ7k8Z4MD77iW%2BhiYUj8ylM%2FuRLp%2FR9xsQh7wsQSA%3D%3D\"}]}\r\ncf-ray: 9719c38e6999efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107793,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65359)","md5":"7a88dd7978f2405a8f1591ad8cfee32e","sha1":"ce8bbf8a7203a94a4003d84104b5ccada5abce44","sha256":"d4a2185c3053f02af6ddaca0fc77fb641aa3c7122f3b58731b895ce2cbe630c3","sha512":"cccd44410e729daa83a7df8ffe0a0f9de6317226756e67a021608948c85d6c526f8187df19c1c5ea55cc7332bb389320b9423c717a564eeaa18f358c55e02984","ssdeep":"768:1kGxweBdmlp5tpFEC6T3NssBk/6UIbZbBrJNCGCIK3bfMQqNjkRQmNaA:Pwe6tEC6T3TkSdrB0Mbju","tlshash":"fbb3d7a0f11031ea7223c55a71d0ed873619a053e6674eb7f26f25d84f896ca0773f1a","first_seen":"2025-08-19T12:48:41.380376Z","last_seen":"2025-08-19T12:48:41.380376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.fancybox-1.3.4.css","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /lib/fancybox/jquery.fancybox-1.3.4.css HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 1611\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"2242-686a99b5-1603e3;br\"\r\nlast-modified: Sun, 06 Jul 2025 15:43:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jx5UD%2FBz2WfE50BJv3IZa0ghNRkT3nJpkeHx%2FlJkTK4vGiZ5JzuIE65tRZQXRfCdG13VyTSMv%2FwgumMAWA5Firk5RvSCts8GW9lPBZF3eJ62VQ%3D%3D\"}]}\r\ncf-ray: 9719c38e79baefdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8770,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"31e78f10388890e74dbae5952b863ae3","sha1":"8194169044c78dad92275be3cabe1bcd13ddd576","sha256":"04fd5564525d7981086cb35404c5469ef38794043e9e37ded7c042c2d9986b5d","sha512":"43f87c957e80e541c8d94ad860bc002d4d1ce52f8e98f0742be8656cfe17803ade1716b4ed81d63053609d22e4d6cd31d343c57eb41f189a0c1ab38163672177","ssdeep":"192:gjEAkcEki8B8Z+K7LydnHsUGmD8rPQ4DZ24XFdmEy5i2AWSFHjUHfygkc2IS4om:gjQw","tlshash":"6f02e01761d53549b439dd90fbef9e19d23e30876a0a4dfba85db86883c23c480e35d5","first_seen":"2025-08-19T12:48:41.381451Z","last_seen":"2025-08-19T12:48:41.381451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/mcN7F-aQgiA-E8dMn-FrVWn-mXxEF.png","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/mcN7F-aQgiA-E8dMn-FrVWn-mXxEF.png HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 321871\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"4e94f-5c6c460b-1603d9;;;\"\r\nlast-modified: Tue, 19 Feb 2019 18:08:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkHat9o%2FkMme1XTvKErkOgOwTjH%2FKo9R5e3LLO59KBJqTo7HxJOy%2BCVl5Mhi%2FKN%2FfeJ65rXVL3Ac7ytskI%2FlK3xgIMrvrDv%2F8wP24ldcFCyJvQ%3D%3D\"}]}\r\ncf-ray: 9719c38e89e9efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":321871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 661 x 621, 8-bit/color RGBA, non-interlaced","md5":"c0fbed32585bb9ee1cf057359b477e41","sha1":"ddc4c6eb5153ee7f755f82ee47eb188f8685e76d","sha256":"2fec55d388b4fdd0bb32297bf86f0adc7af7a6f1336a15a02a3daa957b6aaa56","sha512":"3ca3c6f2c73c4072c2e6316dcda9d254350baf36c08d1449452e115cf99fbb8eea44ae114803452636398a70a295a6240f5fcf27315719681f8c0ab16d7583c7","ssdeep":"6144:EVFCofw5aIG3tjIFAKVY2yQM88PRKyNbIvC/8Z39Aaaxmtll5pbqobB:KCoCaBKVli88P/y39AaLrTqobB","tlshash":"f8642335a4ef2be2426b8087b165bc1f99d070456b927af403dcf9cc3509605def9686","first_seen":"2024-11-18T18:39:38.16707Z","last_seen":"2025-09-03T18:58:17.835226Z","times_seen":4,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heyleia.com/images/favicon.png","fqdn":"heyleia.com","domain":"heyleia.com","tld":"com"},"ip":{"addr":"54.82.153.20","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heyleia.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 11:39:17 GMT","end":"Sun, 26 Oct 2025 11:39:16 GMT"},"fingerprint":{"sha1":"45:D4:EB:56:11:72:FA:47:E7:E3:4C:2C:15:DF:2E:DE:7F:04:82:A1","sha256":"AA:8F:0F:E1:A7:F2:45:1E:30:8E:3F:6D:FD:B6:93:E6:91:29:D0:FF:24:72:22:8D:D2:DA:EA:DD:8D:EF:74:F1"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: heyleia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 19 Aug 2025 12:48:13 GMT\r\nServer: Apache/2.4.61 (Amazon) OpenSSL/1.0.2k-fips mod_wsgi/3.5 Python/3.6.12 PHP/7.3.30\r\nLast-Modified: Mon, 09 Dec 2019 16:26:38 GMT\r\nETag: \"d17-59947dc1dae56\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3351\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"mod_wsgi:3.5","description":"mod_wsgi is an Apache HTTP Server module that provides a WSGI compliant interface for hosting Python based web applications under Apache.","website":"https://code.google.com/p/modwsgi","common_platform_enumeration":"cpe:2.3:a:modwsgi:mod_wsgi:*:*:*:*:*:*:*:*","icon":"mod_wsgi.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.61","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Python:3.6.12","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Amazon EC2","description":"Amazon Elastic Compute Cloud is a part of Amazon.com's cloud-computing platform, Amazon Web Services, that allows users to rent virtual computers on which to run their own computer applications.","website":"https://aws.amazon.com/ec2/","common_platform_enumeration":"","icon":"Amazon EC2.svg","categories":["Web servers"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"be72625bea42a5c8ec06a69ceda27c68","sha1":"ddb93d3580d03b11193fb051a079f1837d59b898","sha256":"3ca3c3c6d5c61df398d97ad7908ac0c0d5d5d3a046744e7cc13993abe3e92bf4","sha512":"03025372c752b6933bc6a4b0c1f51d5002101373f184517ff9641bea437bc366aa4c0b0af8e6dbbc41b769317a20b1063a84249527bfcfd100a6156d17097f0a","ssdeep":"","tlshash":"b2612a9e39804a31870cb436b4a92150d4636a1a838cd5b9f4fda8f34f512e4175b0fb","first_seen":"2024-11-18T18:39:38.178907Z","last_seen":"2025-10-11T14:52:48.504185Z","times_seen":11,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/lib/fancybox/jquery.fancybox-1.3.4.pack.js%3Fv=1751816560","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /lib/fancybox/jquery.fancybox-1.3.4.pack.js%3Fv=1751816560 HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28768\r\netag: \"7060-5f484816-1603e4;;;\"\r\nlast-modified: Thu, 27 Aug 2020 23:56:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcgYvB4F%2F%2BHIwXuScEjNAqpGXvXdpYvxY4f1X22%2BubiLYg6TvhrwEQq7tLmyUFXJTly6ePu1TMlUm1EIfUN5AZQASTti%2BTueA2em08wJ8CmytQ%3D%3D\"}]}\r\ncf-ray: 9719c38e69a8efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28768,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (480)","md5":"f498afde9efbbd01bd02be3fc1fdb832","sha1":"c4816f5fa82ceb95c158b80404f5f0e6e410da2a","sha256":"1606f56e67b118447e2dba71022b7fbedeaaaafaf3e36252f453f10233324f1e","sha512":"efeeab87d0c8744239900cf0dcb8394b7b695ef5c3f613fe4eccfaf5c58a79911d8935d2c7542437dbbb2378a7441be88354a2702af24cba1f5a0645da4d59a9","ssdeep":"192:+/EdHapffnE2CywZrrdHy4qDP2Yz4NVSkHRSCscCynRMarqA4byryrbTHiZYyHFR:+/RpfvE2ycP10VotSl8Dykj0B","tlshash":"4ed2741b65f328368237b079cb9fa10cb33298275707dd66791c91945f806b80af9fe9","first_seen":"2023-03-11T10:39:15Z","last_seen":"2025-09-03T18:58:17.819535Z","times_seen":10,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/GbRkU-yKjoZ-vBuSX-fa34x-eseJe.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/GbRkU-yKjoZ-vBuSX-fa34x-eseJe.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 102547\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"19093-5c6c4861-1603d7;;;\"\r\nlast-modified: Tue, 19 Feb 2019 18:18:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9%2BdjLo1ESbSk4J24OCM%2Fj3X1mK5IQWS2QLD8Iz9Hsr1ML248MEM%2Bq1l1%2BFfp%2FbyBINq3dVTWNYg9hV2HggHbWmKQuKWLEiY%2Fugy0A0q6zMVtA%3D%3D\"}]}\r\ncf-ray: 9719c38e89deefdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":102547,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 954x1000, components 3","md5":"f13b9d16b31356a02d4d35ab95aae1ed","sha1":"9bce5cb25669ea36de60f72ec468156d47510e0e","sha256":"41c3cfc925eb24e6c5d57deba26a2150bd4797ac6c407b7f013e8344911b2550","sha512":"99e745bfd521d169a51e9bee26e7eec39696fbda8cc57786b03af2253d704afd7dab6d5894718def0c5285d3f99ad7caf79c2a545fed7c2f58a5e392cff79ecc","ssdeep":"1536:cu9aM8gkJRTysPs7N1GBjQIJ2IHjEeV2/BvKFkcvJT2YRZLFiHGOb1NJbRH5:19aLyh5IBjD2IHjEeV2JikcxrOGGt5","tlshash":"fca3be5b0947d537724b852a0b00312931638a41639712b6793e3effb3bc98e6e8fe51","first_seen":"2025-08-19T12:48:41.386163Z","last_seen":"2025-08-19T12:48:41.386163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/s8IK4-2NGdA-CtH3I-v9jp1-Fvtdd.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:13.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/s8IK4-2NGdA-CtH3I-v9jp1-Fvtdd.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:13 GMT\r\netag: \"b829-67773969-1603cf;;;\"\r\nlast-modified: Fri, 03 Jan 2025 01:12:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47145\r\naccept-ranges: bytes\r\ndate: Tue, 19 Aug 2025 12:48:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPLArp31ia5UpjNIolS6j73EklubpAB3m%2Ffq8Y3%2FJ72KPcaIfhSu69xFvL%2B12BqC1%2FcHYH2Da3bK9YF1hPW%2FQb5KcJvmLVMr%2FjLdZvG%2B7V7iWg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9719c3922e25269f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":47145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 525x350, components 3","md5":"65a647e3ed5756b59349262671fffd42","sha1":"ea654df567df08c430e33bbb10f4a91b31801d91","sha256":"21d8f70adcbf2009fb0fbc835430afef557c67dd4fcb77d62f6c641712fe753b","sha512":"4499fe165b18a22860b001a835b6328c1368bdd50ed8ee2a55eed83f9c56ed4819461a9a423a5a8e228e750519a92859692f6f8be4d0d8189265d602bd7ecb27","ssdeep":"768:1jW57cE+iqgHM/2TJOTvihL7imqihPZCrFWgy1+eaqd9TF9hUruw:1jW57nbHM+OTvYL7imqq0RynBd9TF9Yz","tlshash":"902302df813bc140fb6224362e2e19f0e565a769df9f97ba7206421f1a1d824788091d","first_seen":"2025-08-19T12:48:41.387542Z","last_seen":"2025-08-19T12:48:41.387542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-19T12:48:11.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncache-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VUszhyQ5l16aQzxTuIaA%2FuDzJ6eUVDfOZqFHJKWIfwRpKy7hZEQoGbEt9Eo7vDWSV%2BZIq6gBWDO2pOlDSAVxPgrJo7Uargoe0CQaxyDbzI6DFQ%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9719c38b8b1aefdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"BootstrapCDN:3.3.5","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.1.25","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":130621,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"XML 1.0 document, ASCII text, with very long lines (597)","md5":"bdce495afb643aac0be53fed788c67ee","sha1":"1d175352aa3a3a4b4866f78055daa7b038c2b97a","sha256":"eba9b8469140efced50bccbe8e4a5e9c775239125cd6f1895cb6fa622f21164d","sha512":"d73d93709e50a27053ed5c8d39ac92834b7c87c075e18d49a3e4146784435ec514cbbafc6689987ca89f38055a3d8085483c71267dcae540d788bfa8d0a0ae7b","ssdeep":"1536:G6hlvv2q4cxOz1Y0/IkKt2EZB9e1EqWtElK24qWk:G6h12q431Y0/IkMZBo2qWSK24qWk","tlshash":"56d3642e65f602b71443687c57ae02877e26e107485a9e59beedc785cfc2ed8cc63348","first_seen":"2025-08-19T12:48:41.388967Z","last_seen":"2025-08-19T12:48:41.388967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":98,"dns":64,"connect":8,"send":0,"wait":262,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:800,800i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Raleway:800,800i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 19 Aug 2025 12:48:12 GMT\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3863,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e15a9905bf474db99f83fab88882b9e5","sha1":"f181f49598a0eb60ea63b48ed7f9f7c29bfad338","sha256":"86ba73348db3cc130ab55cc5a379020e93dfaeef92400d8baaa496cb6c1a7b79","sha512":"cb6a4572995cbcae336168e298f80d7271db5ba904964f3578ea181af433993770811235bf9981c6ff3382b76affb86344d8a6a97457612e0c7a2f4f45220990","ssdeep":"","tlshash":"3081ce92091b9110ee479ec663cf7e33fe4e52513042857dabfd58edacdad2212a4b0d","first_seen":"2025-08-19T12:48:41.393403Z","last_seen":"2025-09-03T18:58:17.814857Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":1,"connect":14,"send":0,"wait":32,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldo-finance.eu.com/img/TCpN1-BU7ok-r6EeF-x8yaN-vAGHh.jpeg","fqdn":"ldo-finance.eu.com","domain":"ldo-finance.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB","date":"2025-08-19T12:48:12.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ldo-finance.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 20:57:20 GMT","end":"Sun, 16 Nov 2025 21:56:03 GMT"},"fingerprint":{"sha1":"38:36:04:7D:A3:06:91:1E:2A:AD:07:10:1F:49:7C:11:05:29:7D:8B","sha256":"B6:7B:4C:99:47:AA:57:DE:FF:50:AF:90:C7:EC:B5:88:22:B7:17:9A:56:16:F9:1B:FC:4A:CF:1D:A0:90:5D:F4"}}},"request":{"raw":"GET /img/TCpN1-BU7ok-r6EeF-x8yaN-vAGHh.jpeg HTTP/1.1\r\nHost: ldo-finance.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ldo-finance.eu.com/?gad_source=1\u0026gad_campaignid=22911906399\u0026gbraid=0AAAABAyVMs8GqJwSqdvNmIlKjvsSj2zDS\u0026gclid=Cj0KCQjwwZDFBhCpARIsAB95qO14qQe_rZJk8jJ2qH5Qe61ahg2_IohcOlKfSPGXAZcbgVtSm1umWg4aAp8xEALw_wcB\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 12:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12746\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 Aug 2025 12:48:12 GMT\r\netag: \"31ca-61288c59-1603d5;;;\"\r\nlast-modified: Fri, 27 Aug 2021 06:55:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulhWS2YU3RZrmeML1Acu96HWZJrvXCXKpQnfBfikv8bdy7viE2vDVnyU1OhRXujBO%2BtjAVT7lx%2FxAJE5%2Ffepo9R0oot7rV6jnT%2FXMekGuQZsmw%3D%3D\"}]}\r\ncf-ray: 9719c38e79d6efdb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12746,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 524x350, components 3","md5":"92a0681da3d82f4817e536ee2dfc5e25","sha1":"a1c328d244cc7379c95051a5e078676f18802e9c","sha256":"87559ad0d3f78fe5814109ddbf6703ccc055bebbd8ed0008f5937a10ad174588","sha512":"72b1a4ff4c1df6a97d467fabe9d57faf7c42fbaf0290e096a3ec53e19901c96762a056d36866d8049ddaa15c1b57669f04e02390e01f7e7f2573f80a9672ad98","ssdeep":"192:30uvUT2Ykbwe4q0XC+jJpiVYBqUPU+Q5FAjqxNk2m3XEi/S14i4fHYI3T/4d:30uu2nv0XumByfFRrJEXEi/ok4/","tlshash":"2842c0880b382e17c38262f515fdb118afa6bf65068f76cf29844435633b2e17c468d5","first_seen":"2025-08-19T12:48:41.395195Z","last_seen":"2025-09-03T18:58:17.840204Z","times_seen":5,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}