{"report_id":"4587ca06-39f6-48ff-974b-e3c146fb2588","version":6,"status":"done","tags":[],"date":"2026-06-03T10:47:28Z","url":{"schema":"http","addr":"in.velorahr.com/n/Browni-xixRLb","fqdn":"in.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"34.255.202.149","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","fqdn":"brownie.velorahr.com","domain":"velorahr.com","tld":"com"},"title":"Brownie - Entrevista online para Dependiente","dom":{"size":8273,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8245), with no line terminators","md5":"07a161284f5b00844599bc92a4687986","sha1":"f03b8ca7ae5d06f15c6564d7e946dee2edac2041","sha256":"cb417e24805242c067e8d971e5da8f59b728736420c096ca340f10b3523acf93","sha512":"a4f7f599e42f8a276c849131bb1c381eb354b4fc51d1bbe2644dd72051298a0d4c0bf3c9b545516ae869445d03d7ff25a8ab0d7d5f058137063518ce2635d70d","ssdeep":"192:k0M5QJRaMrIGUnfu8k8HzTuJFrGusHRbf:ip6fUnf1k8TTiGVr","tlshash":"630283b912401532a1130dcbb4b26bce11e7c11ecd06bc656bb643e76fc5ef54a15b87","dom_hash":"domhash7dfa9a062a64d927981420f5a206d06f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"in.velorahr.com/n/Browni-xixRLb","fqdn":"in.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"34.255.202.149","port":0,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-08T10:47:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"ats.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"ats.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"in.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"in.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"d2t3vz512yrf7u.cloudfront.net","ip":{"addr":"108.157.232.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-05-10T19:47:20Z","last_seen":"2026-04-19T22:53:04.835344Z","alert_count":0,"request_count":5,"received_data":523876,"sent_data":2598,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ats.velorahr.com","ip":{"addr":"13.249.8.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-07-18","domain_rank":0,"first_seen":"2026-06-03T10:47:30.105382Z","last_seen":"2026-06-03T10:47:30.105382Z","alert_count":2,"request_count":1,"received_data":2360,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"brownie.velorahr.com","ip":{"addr":"13.249.8.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-07-18","domain_rank":0,"first_seen":"2026-06-03T10:47:30.109059Z","last_seen":"2026-06-03T10:47:30.109059Z","alert_count":10,"request_count":5,"received_data":1264189,"sent_data":2447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","ip":{"addr":"52.215.139.123","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2021-09-29","domain_rank":5259232,"first_seen":"2023-05-10T19:47:18Z","last_seen":"2026-04-19T22:53:04.863386Z","alert_count":0,"request_count":4,"received_data":6180,"sent_data":2716,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"in.velorahr.com","ip":{"addr":"52.212.204.65","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2024-07-18","domain_rank":0,"first_seen":"2025-06-18T07:28:31.824119Z","last_seen":"2025-08-13T08:12:40.695389Z","alert_count":2,"request_count":1,"received_data":1274,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":2,"received_data":87942,"sent_data":1110,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":23026,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"brownie.velorahr.com/static/js/main.js","fqdn":"brownie.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"13.249.8.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f31a71bb17a4be57a38bac845ee7380e","sha1":"f56ccc0735f801b1e8ca65565d726bba67ce3004","sha256":"a64700356f751896b2cb10083172b7a1e096f5d2abb2c67b2ab293c829839d59","sha512":"64507fe40405dd4a7ac25a6500f26acfdf3c9c15038b9b0160ef4b486217c2a0182b2f774727ad7a72dc3481e418eeee24b14ecc0d42d435ffaccd234aac155f","ssdeep":"24576:WoRWoyjzRIaoStn5jDdZL0KEON7IVzXM3pfiPKL8u:WoA7RIaoSt5jP0KE6IVzXM3llL8u","tlshash":"be457cd47291f8614af380d980bf000af33d2d19780d9890f36aedd969a998da177f7d","size":1200772,"data":"","first_seen":"2026-06-03T10:47:34.573611Z","last_seen":"2026-06-03T10:47:34.573611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"d2t3vz512yrf7u.cloudfront.net/brand/poweredbyvelora3.png","fqdn":"d2t3vz512yrf7u.cloudfront.net","domain":"d2t3vz512yrf7u.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:08.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /brand/poweredbyvelora3.png HTTP/1.1\r\nHost: d2t3vz512yrf7u.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brownie.velorahr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/png\r\ncontent-length: 44370\r\nlast-modified: Tue, 23 Sep 2025 07:54:27 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ndate: Wed, 03 Jun 2026 10:47:08 GMT\r\netag: \"45464c908eaad15b9e3edabaa915d959\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f33514300fff2b9161f119d57e09b528.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Wna5p5pC8dboq-GKSTr_XIVOSGuJwHcwbdlDrIuudl3LmN8eg4gH-Q==\r\nage: 1314\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com career.velorahr.com localhost\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\npermissions-policy: geolocation=(self)\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: cross-origin\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 968 x 382, 8-bit/color RGBA, non-interlaced","md5":"45464c908eaad15b9e3edabaa915d959","sha1":"007f97f25195f05da718eccfd3c7ead48a02aab9","sha256":"72170b99a047493e4c7f9c90725a70335ab8e171e24d631ec1b216438b980495","sha512":"77c0f03896533a86bf27b9826c58219a6717e909f04cd5f93a84b38fc46de90c91e0c4c696ebefac1146c3319c1f69f9b5f1421b3e7887acab759396610f9a15","ssdeep":"768:un3tVGNQsdH9tuk8TMyvuW4uOk9MkeXz8y1amShPXcfzLBcnI7QFO9Vi:GtEQouvNuhM9YXzra3KfzLuI7QFO9w","tlshash":"9213f1345c01cba3e798d37600f3ac1b7952056d26a5f02f967d7cb9c1894e42ee70ea","first_seen":"2026-02-01T16:07:09.137484Z","last_seen":"2026-06-03T10:47:34.54478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":26,"dns":1,"connect":8,"send":0,"wait":33,"receive":8,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2t3vz512yrf7u.cloudfront.net/autogero/Browni/2025/09/3ab4bf43-3305-11ef-b4c8-02d2ff85c53f/brownie_logo-AHJwv.png","fqdn":"d2t3vz512yrf7u.cloudfront.net","domain":"d2t3vz512yrf7u.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:09.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /autogero/Browni/2025/09/3ab4bf43-3305-11ef-b4c8-02d2ff85c53f/brownie_logo-AHJwv.png HTTP/1.1\r\nHost: d2t3vz512yrf7u.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brownie.velorahr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T00:50:52.477296Z","times_seen":17489349,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats.velorahr.com/velora.svg","fqdn":"ats.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"13.249.8.121","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:09.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.velorahr.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 07 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:E9:41:91:28:73:64:C6:3A:CD:E7:4B:5C:0C:BD:42:EF:60:4C:08","sha256":"0D:A3:BC:3B:B6:E3:AB:2A:D2:FC:19:F9:68:BA:3E:5F:24:75:7B:C9:BC:37:7C:F5:59:6D:9E:3D:BA:DB:7D:A5"}}},"request":{"raw":"GET /velora.svg HTTP/1.1\r\nHost: ats.velorahr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/svg+xml\r\ndate: Wed, 03 Jun 2026 08:44:28 GMT\r\nlast-modified: Tue, 02 Jun 2026 15:30:14 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"f56db596ac30f353feff543907d3b67a\"\r\nvia: 1.1 baef86fdeac136e8f6ea0adf662fe0dc.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 7363\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com career.velorahr.com localhost\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\npermissions-policy: geolocation=(self)\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: cross-origin\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding, Origin\r\nx-set: /velora.svg\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Vt1Pyw4drAHRjEesCLZUlCTwbjzfzhpuypglEqO1w3FcPMZrZTuWFA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1308,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f56db596ac30f353feff543907d3b67a","sha1":"da0777ff08597ea1f8370286a25dbba9b39c86dd","sha256":"6b0493d07c1698bfb7bdcadbef0427e22dafa718e0eac6d679410c523cdda6ec","sha512":"8fb6d7ac12f2ddd5dafff8cee28b400642e7cc08785eb7ad698249abdc65697fc7b1f7b5e1989c0ff8af8579a64872ccc62ddd0c70fc8ad7649909dbc791cfb9","ssdeep":"","tlshash":"8a21205a533ac874f145c829d039cd1511ae32b36582c140e254ff1f452bb967d549d3","first_seen":"2026-02-01T16:07:09.129161Z","last_seen":"2026-06-03T10:47:34.549532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":52,"connect":8,"send":0,"wait":45,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"ats.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"ats.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","fqdn":"brownie.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"13.249.8.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T10:47:06.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.velorahr.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 07 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:E9:41:91:28:73:64:C6:3A:CD:E7:4B:5C:0C:BD:42:EF:60:4C:08","sha256":"0D:A3:BC:3B:B6:E3:AB:2A:D2:FC:19:F9:68:BA:3E:5F:24:75:7B:C9:BC:37:7C:F5:59:6D:9E:3D:BA:DB:7D:A5"}}},"request":{"raw":"GET /sales-assistant-4552?nid=Browni-xixRLb HTTP/1.1\r\nHost: brownie.velorahr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/html\r\ncontent-length: 937\r\ndate: Wed, 03 Jun 2026 10:47:07 GMT\r\nlast-modified: Thu, 28 May 2026 08:12:12 GMT\r\netag: \"f3e9eb5607ac5bb1f377383765d9e22e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Error from cloudfront\r\nvia: 1.1 a596dba16abe9fc6ca8a5d28ce2530a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: qbTwbaNtqHteCKktFwX6gCok582RncdIosPqtoOJwfRee_twcavNLQ==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npermissions-policy: geolocation=(self), microphone=(self), camera=(self)\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":937,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (937), with no line terminators","md5":"f3e9eb5607ac5bb1f377383765d9e22e","sha1":"c191a08ef26319d75c631577ed7c0391238ecce2","sha256":"28bca0da1ca066dabfe3bcbbf5d33f0e6a8765a1c6632a63eba0aa3ea93aac83","sha512":"3960f8abae5ca1d72b6901d59d3a0310bed8ccd00d4507817df751de3915e3f77e56fe6b1d7cc050d9de8bed63bf80911ae332100ba997f89b52e5b251e4565b","ssdeep":"","tlshash":"561188570824d40d8331977e7ee2f52dc801bf1c7551fc10f46614ab49c0bab8825412","first_seen":"2026-06-03T10:47:34.552903Z","last_seen":"2026-06-03T10:47:34.552903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1534,"timings":{"blocked":615,"dns":69,"connect":10,"send":0,"wait":304,"receive":0,"ssl":532},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws/gero/start?nid=Browni-xixRLb\u0026widget_mode=false\u0026","fqdn":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","domain":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","tld":"lambda-url.eu-west-1.on.aws"},"ip":{"addr":"52.215.139.123","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:08.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lambda-url.eu-west-1.on.aws","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:D9:BB:83:76:41:52:EE:0D:89:24:46:DD:4B:2C:02:E8:57:3F:E2","sha256":"38:73:F1:4C:DE:E4:E5:73:92:30:4D:F0:8F:F4:5B:52:86:E9:4A:EF:35:59:35:33:53:9D:BD:1C:3C:3D:81:AF"}}},"request":{"raw":"OPTIONS /gero/start?nid=Browni-xixRLb\u0026widget_mode=false\u0026 HTTP/1.1\r\nHost: aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: bot-ts,bot-url,ngrok-skip-browser-warning\r\nReferer: https://brownie.velorahr.com/\r\nOrigin: https://brownie.velorahr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Jun 2026 10:47:08 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nx-amzn-RequestId: dee4f000-85cd-4ba4-a94f-983a82cf781f\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: https://brownie.velorahr.com\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-headers: bot-ts,bot-url,ngrok-skip-browser-warning\r\nx-amzn-Remapped-content-length: 2\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'\r\ncross-origin-opener-policy: same-origin\r\ncache-control: no-store\r\nvary: Origin\r\nx-amzn-Remapped-server: \r\nx-content-type-options: nosniff\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\nX-Amzn-Trace-Id: Root=1-6a20062c-502f5fe3271f6d602b18c66d;Parent=5892d1c04f4e6cc7;Sampled=0;Lineage=1:c986e1be:0\r\npermissions-policy: microphone=(self)\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-07-24T00:52:30.656522Z","times_seen":354120,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":129,"dns":30,"connect":35,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brownie.velorahr.com/logo192.png","fqdn":"brownie.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"13.249.8.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:08.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.velorahr.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 07 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:E9:41:91:28:73:64:C6:3A:CD:E7:4B:5C:0C:BD:42:EF:60:4C:08","sha256":"0D:A3:BC:3B:B6:E3:AB:2A:D2:FC:19:F9:68:BA:3E:5F:24:75:7B:C9:BC:37:7C:F5:59:6D:9E:3D:BA:DB:7D:A5"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: brownie.velorahr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/png\r\ncontent-length: 5347\r\ncross-origin-embedder-policy: require-corp\r\ndate: Wed, 03 Jun 2026 10:47:09 GMT\r\nlast-modified: Thu, 28 May 2026 08:12:12 GMT\r\netag: \"33dbdd0177549353eeeb785d02c294af\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 72136be7e2996cd08a1320bb097d5cae.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\ncross-origin-opener-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npermissions-policy: geolocation=(self), microphone=(self), camera=(self)\r\nx-amz-cf-id: KXg9fZtvSMC94fJnARB_Y-B4b_HloOPKRuza6uhjyIPJBYrqV0QrSQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-07-24T00:22:40.634195Z","times_seen":11846,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d2t3vz512yrf7u.cloudfront.net/autogero/Browni/2025/01/e5d19692-d4c1-11ef-be0d-02d2ff85c53f/avatar%20brownie%20def-uuRv8.png","fqdn":"d2t3vz512yrf7u.cloudfront.net","domain":"d2t3vz512yrf7u.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:09.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /autogero/Browni/2025/01/e5d19692-d4c1-11ef-be0d-02d2ff85c53f/avatar%20brownie%20def-uuRv8.png HTTP/1.1\r\nHost: d2t3vz512yrf7u.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brownie.velorahr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T00:50:52.477296Z","times_seen":17489349,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brownie.velorahr.com/favicon.ico","fqdn":"brownie.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"13.249.8.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:08.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.velorahr.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 07 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:E9:41:91:28:73:64:C6:3A:CD:E7:4B:5C:0C:BD:42:EF:60:4C:08","sha256":"0D:A3:BC:3B:B6:E3:AB:2A:D2:FC:19:F9:68:BA:3E:5F:24:75:7B:C9:BC:37:7C:F5:59:6D:9E:3D:BA:DB:7D:A5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: brownie.velorahr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 3870\r\ncross-origin-embedder-policy: require-corp\r\ndate: Wed, 03 Jun 2026 10:47:09 GMT\r\nlast-modified: Thu, 28 May 2026 08:12:12 GMT\r\netag: \"c92b85a5b907c70211f4ec25e29a8c4a\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 72136be7e2996cd08a1320bb097d5cae.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\ncross-origin-opener-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npermissions-policy: geolocation=(self), microphone=(self), camera=(self)\r\nx-amz-cf-id: TarIr4C4kg5Lzn0mRzc0MCGdXP54leBBXyAo0pUe4-NnF1_jnjr2hg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3870,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with \n- PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel","md5":"c92b85a5b907c70211f4ec25e29a8c4a","sha1":"1120538c77ad1f28a89243b4b53fe2ac16cc3bc6","sha256":"3d10f7da6c603178340081668c4ac5b3ae9743ca9a262ab0fcd312fbb9f48bdd","sha512":"d792613e3c31d3aea08ae9ce51a26498afed8b48c93290640c64d0a23edc85e524bc1d090b5ba3fa161b3f2f7d31f9d1da5db77b14189fc3f8ed81ff830fa70c","ssdeep":"","tlshash":"26815cb31b994539e5cb0317fa069036d8f1d11e09b5493e1a938c05ad2fe99c26a36e","first_seen":"2023-04-12T20:45:07Z","last_seen":"2026-07-23T20:50:05.698091Z","times_seen":11279,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in.velorahr.com/n/Browni-xixRLb","fqdn":"in.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"52.212.204.65","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T10:47:05.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.velorahr.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:21:75:F4:D9:C3:B0:3A:35:EE:59:73:BA:A9:22:EB:1B:38:8B:3D","sha256":"BF:1C:FE:D0:C4:C8:EF:D6:5C:FE:4B:26:7A:F6:FB:8B:C6:2B:25:2B:46:0C:97:5F:24:CA:7D:1F:23:32:A8:C8"}}},"request":{"raw":"GET /n/Browni-xixRLb HTTP/1.1\r\nHost: in.velorahr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 03 Jun 2026 10:47:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb\r\nserver: nginx/1.30.2\r\ncache-control: no-cache, private\r\nx-correlation-trace-id: d68d46dd-9f43-4f16-8098-0e38ab50ecca\r\nx-fastcgi-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":937,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T00:50:52.477296Z","times_seen":17489349,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":254,"dns":45,"connect":33,"send":0,"wait":76,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"in.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"in.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:08.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://brownie.velorahr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 10:17:38 GMT\r\nexpires: Fri, 28 May 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 520170\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T00:52:06.230802Z","times_seen":241510,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":144,"dns":1,"connect":27,"send":0,"wait":28,"receive":36,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws/gero/customization?nid=Browni-xixRLb\u0026widget_mode=false\u0026","fqdn":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","domain":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","tld":"lambda-url.eu-west-1.on.aws"},"ip":{"addr":"52.215.139.123","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:08.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lambda-url.eu-west-1.on.aws","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:D9:BB:83:76:41:52:EE:0D:89:24:46:DD:4B:2C:02:E8:57:3F:E2","sha256":"38:73:F1:4C:DE:E4:E5:73:92:30:4D:F0:8F:F4:5B:52:86:E9:4A:EF:35:59:35:33:53:9D:BD:1C:3C:3D:81:AF"}}},"request":{"raw":"OPTIONS /gero/customization?nid=Browni-xixRLb\u0026widget_mode=false\u0026 HTTP/1.1\r\nHost: aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: bot-ts,bot-url,ngrok-skip-browser-warning\r\nReferer: https://brownie.velorahr.com/\r\nOrigin: https://brownie.velorahr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Jun 2026 10:47:08 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nx-amzn-RequestId: ee828c4e-0412-4861-88c4-97585d8bf784\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: https://brownie.velorahr.com\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-headers: bot-ts,bot-url,ngrok-skip-browser-warning\r\nx-amzn-Remapped-content-length: 2\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'\r\ncross-origin-opener-policy: same-origin\r\ncache-control: no-store\r\nvary: Origin\r\nx-amzn-Remapped-server: \r\nx-content-type-options: nosniff\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\nX-Amzn-Trace-Id: Root=1-6a20062c-0a8efd807639078460b2963a;Parent=0624ea297454561b;Sampled=0;Lineage=1:c986e1be:0\r\npermissions-policy: microphone=(self)\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-07-24T00:52:30.656522Z","times_seen":354120,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":139,"dns":32,"connect":35,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws/gero/start?nid=Browni-xixRLb\u0026widget_mode=false\u0026","fqdn":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","domain":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","tld":"lambda-url.eu-west-1.on.aws"},"ip":{"addr":"52.215.139.123","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:08.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lambda-url.eu-west-1.on.aws","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:D9:BB:83:76:41:52:EE:0D:89:24:46:DD:4B:2C:02:E8:57:3F:E2","sha256":"38:73:F1:4C:DE:E4:E5:73:92:30:4D:F0:8F:F4:5B:52:86:E9:4A:EF:35:59:35:33:53:9D:BD:1C:3C:3D:81:AF"}}},"request":{"raw":"GET /gero/start?nid=Browni-xixRLb\u0026widget_mode=false\u0026 HTTP/1.1\r\nHost: aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nBot-Url: https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb\r\nBot-Ts: 1780483628014\r\nngrok-skip-browser-warning: skip\r\nOrigin: https://brownie.velorahr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brownie.velorahr.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Jun 2026 10:47:09 GMT\r\nContent-Type: application/json\r\nContent-Length: 1015\r\nConnection: keep-alive\r\nx-amzn-RequestId: 439623d1-5021-4111-8dd5-0bb2b2006bfd\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-amzn-Remapped-content-length: 1015\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'\r\ncross-origin-opener-policy: same-origin\r\ncache-control: no-store\r\nx-amzn-Remapped-server: \r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Range\r\nX-Amzn-Trace-Id: Root=1-6a20062c-30ad1d273a752fe27e1c2281;Parent=78832d94ba03c18b;Sampled=0;Lineage=1:c986e1be:0\r\nx-correlation-id: 198f25d6-759c-48eb-a3dd-f5db2e8ece5d\r\npermissions-policy: microphone=(self)\r\naccess-control-allow-credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"22422a7af010c4e2f9d7749543b4cda5","sha1":"ca98883ae881423d3b76e6118231fb4efa158bd6","sha256":"f84cd54225abde0ba7e787b7b2558fc492cec2294b25e22a0e8c0a2c6606d098","sha512":"d730db26eddac03c2494ffb95e3b78c18460e8fa38d47335ce24734ee75332ad190203350e2f57b95bce3ea12160c76e9b545f2009bb2d4f371dee357bb47aac","ssdeep":"","tlshash":"3a11eba5ae045af012a341df4892eed387e8612fb38ccd71c895cbe802c9281461b81f","first_seen":"2026-06-03T10:47:34.559613Z","last_seen":"2026-06-03T10:47:34.559613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2t3vz512yrf7u.cloudfront.net/autogero/Browni/2025/01/e5d19692-d4c1-11ef-be0d-02d2ff85c53f/avatar%20brownie%20def-uuRv8.png","fqdn":"d2t3vz512yrf7u.cloudfront.net","domain":"d2t3vz512yrf7u.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:09.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /autogero/Browni/2025/01/e5d19692-d4c1-11ef-be0d-02d2ff85c53f/avatar%20brownie%20def-uuRv8.png HTTP/1.1\r\nHost: d2t3vz512yrf7u.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brownie.velorahr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/png\r\ncontent-length: 474143\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 02 Jun 2026 15:56:30 GMT\r\nlast-modified: Fri, 17 Jan 2025 12:00:30 GMT\r\netag: \"60911312ccb6a4ae9fb191dd3ddc47a8\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f26fbc8f93ad20ccbbd480fccb1e6f88.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nage: 67840\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com career.velorahr.com localhost\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\npermissions-policy: geolocation=(self)\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: cross-origin\r\nx-amz-cf-id: eTVNyouNdpjmLjycqmf21nCKXXT2w3MYYFK9VsYGcBVC7ifLoavSJw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":474143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 709 x 600, 8-bit/color RGBA, non-interlaced","md5":"60911312ccb6a4ae9fb191dd3ddc47a8","sha1":"fe6fa68ef64a96cf594cddc3b1cd4bd850f1d095","sha256":"a4b8474e2ea784231b790ba163204c6b78a9303b45aeea125a6b87345f0eeaca","sha512":"0f93a5f86c2f425610c09d3bfd7145d9c51499fc40887f8ac5ef410281256190f1e15edc7e66d73e838ae1ab8898d10c3519d02917d45c92af855adb798d599e","ssdeep":"12288:xCSuRMU/wDQI1btK7DXjldBk896/iZukyyQ:96H4SXBV6/sCyQ","tlshash":"68a423c770f8c52fe464a14e819e1c5606294cf94971a027116ebfa4c4e6e9f0bdc7ee","first_seen":"2026-06-03T10:47:34.562371Z","last_seen":"2026-06-03T10:47:34.562371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2t3vz512yrf7u.cloudfront.net/autogero/Browni/2025/09/3ab4bf43-3305-11ef-b4c8-02d2ff85c53f/brownie_logo-AHJwv.png","fqdn":"d2t3vz512yrf7u.cloudfront.net","domain":"d2t3vz512yrf7u.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.232.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:09.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /autogero/Browni/2025/09/3ab4bf43-3305-11ef-b4c8-02d2ff85c53f/brownie_logo-AHJwv.png HTTP/1.1\r\nHost: d2t3vz512yrf7u.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brownie.velorahr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/png\r\ncontent-length: 2277\r\ncross-origin-embedder-policy: unsafe-none\r\nlast-modified: Wed, 24 Sep 2025 07:38:30 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ndate: Wed, 03 Jun 2026 10:47:09 GMT\r\netag: \"21fb86b097ce44f61f366ab7621ea627\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f26fbc8f93ad20ccbbd480fccb1e6f88.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\ncross-origin-opener-policy: cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nage: 77646\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com career.velorahr.com localhost\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=3600; includeSubDomains; preload\r\npermissions-policy: geolocation=(self)\r\nx-amz-cf-id: GebEp2uu3zKjnG_REmmBEqbA94wUu8tU8IH7iTryf9FeXES7wdQZzg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 384 x 136, 4-bit colormap, non-interlaced","md5":"21fb86b097ce44f61f366ab7621ea627","sha1":"7f5edcb99319e7c17b0d748236bb74957d9e2d93","sha256":"c7a63fdb2bc7d3da624b81acd075c882c369ab0dba797da85be3dca2b8413035","sha512":"84f1471b9e97f25fd4aaa6cd66a998921d9db5869c92c3179488ae1f83b88a693fe33c52d3917c9227bf6a9476b17a46ddc296f60a988b98beb7ebd2a91cad70","ssdeep":"","tlshash":"7d4129be8c604926317bda2072334fc5952e1a29a74011fc784e09de533cbc390caf2d","first_seen":"2026-06-03T10:47:34.564589Z","last_seen":"2026-06-03T10:47:34.564589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:07.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brownie.velorahr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 03 Jun 2026 10:47:07 GMT\r\ndate: Wed, 03 Jun 2026 10:47:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b9f037ad2bf34f0e66cb12a391456d5f","sha1":"9e5e9fa857e3ed7ef12535c8fac83846034bf4a5","sha256":"2d09d5a02335bea6714b8a21156de9506fdd34d43d597aea05792ff050a588a6","sha512":"a49ad933cd238b818c604b044fa200f2d6a40d24040be41584f0c535f948b2f7642b0d91cbb77b07f41f071d46e6738a0d9c3a2d9ea125f463329280fbfbd970","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/U:pDS99YURRuWDyjooYhREHPM5svvYaR78","tlshash":"86a210a1041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:50.873195Z","last_seen":"2026-07-23T23:38:29.377682Z","times_seen":5817,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":153,"dns":1,"connect":27,"send":0,"wait":47,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws/gero/customization?nid=Browni-xixRLb\u0026widget_mode=false\u0026","fqdn":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","domain":"aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws","tld":"lambda-url.eu-west-1.on.aws"},"ip":{"addr":"52.215.139.123","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:08.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lambda-url.eu-west-1.on.aws","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:D9:BB:83:76:41:52:EE:0D:89:24:46:DD:4B:2C:02:E8:57:3F:E2","sha256":"38:73:F1:4C:DE:E4:E5:73:92:30:4D:F0:8F:F4:5B:52:86:E9:4A:EF:35:59:35:33:53:9D:BD:1C:3C:3D:81:AF"}}},"request":{"raw":"GET /gero/customization?nid=Browni-xixRLb\u0026widget_mode=false\u0026 HTTP/1.1\r\nHost: aifctlnhgyfebrmeonlrviuibi0xsaqf.lambda-url.eu-west-1.on.aws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nBot-Url: https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb\r\nBot-Ts: 1780483628011\r\nngrok-skip-browser-warning: skip\r\nOrigin: https://brownie.velorahr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brownie.velorahr.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Jun 2026 10:47:08 GMT\r\nContent-Type: application/json\r\nContent-Length: 1173\r\nConnection: keep-alive\r\nx-amzn-RequestId: 4ccfcdb2-19c8-457d-a45c-33b1689da027\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nx-amzn-Remapped-content-length: 1173\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'\r\ncross-origin-opener-policy: same-origin\r\ncache-control: no-store\r\nx-amzn-Remapped-server: \r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Range\r\nX-Amzn-Trace-Id: Root=1-6a20062c-6c55c31f326ad32c65417101;Parent=2190de631766eeec;Sampled=0;Lineage=1:c986e1be:0\r\nx-correlation-id: 587d8fa2-71c0-41cf-9fe7-af5d5457298d\r\npermissions-policy: microphone=(self)\r\naccess-control-allow-credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"562f8be98832fe6c6e09adc0b0e70221","sha1":"2c882818d8dee6ff30507fc4c4045b7cef6090ad","sha256":"cf96ae4736e07fbdbdd97e2ad0b701e19056c4e543d6ce719d096987667bcbc9","sha512":"3201e1208c7f8288b2b999818225d634c4ef31796fc43492dfa7ad8cf8b66e7944d5893996af06ad44276814f458b8c79d671c818536329e7064edce40ebe47a","ssdeep":"","tlshash":"05214115548c87bc931b02c5c94faea1f369a109a58c3c6ef84acad865832b001bf386","first_seen":"2026-06-03T10:47:34.567381Z","last_seen":"2026-06-03T10:47:34.567381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:09.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://brownie.velorahr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 10:17:38 GMT\r\nexpires: Fri, 28 May 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 520171\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T00:52:06.230802Z","times_seen":241510,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":28,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brownie.velorahr.com/static/css/main.css","fqdn":"brownie.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"13.249.8.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:07.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.velorahr.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 07 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:E9:41:91:28:73:64:C6:3A:CD:E7:4B:5C:0C:BD:42:EF:60:4C:08","sha256":"0D:A3:BC:3B:B6:E3:AB:2A:D2:FC:19:F9:68:BA:3E:5F:24:75:7B:C9:BC:37:7C:F5:59:6D:9E:3D:BA:DB:7D:A5"}}},"request":{"raw":"GET /static/css/main.css HTTP/1.1\r\nHost: brownie.velorahr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: text/css\r\ncontent-length: 48247\r\ncross-origin-embedder-policy: require-corp\r\ndate: Wed, 03 Jun 2026 10:47:08 GMT\r\nlast-modified: Thu, 28 May 2026 08:12:12 GMT\r\netag: \"300446933d9b6feb61bae3e73771caa3\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 72136be7e2996cd08a1320bb097d5cae.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\ncross-origin-opener-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npermissions-policy: geolocation=(self), microphone=(self), camera=(self)\r\nx-amz-cf-id: 9p7wIhsriasLkdVoNn9IY-WceLrIkXHgfgj2dHm8DGcAnKtZcE4R1A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":48247,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48247), with no line terminators","md5":"300446933d9b6feb61bae3e73771caa3","sha1":"eb4cf47fdf880282c2c4b99d17aec8af1b92d7b5","sha256":"ff02f163d4772ba3a272d4a2eb5ed3e3e35e906f0177e24c15dc8d9a21dac1a2","sha512":"fef44a769d21ec8e7904b53e67f5c4e56753b7edcb41556b5a9ab52e3f110d60ef060119b6eaa236068c6653fcc21b9e56ebec40ea60f2aae46038cf661a6161","ssdeep":"768:7+Qvw1ZTIpGnkkbwx98lSzGKYVDsRTiaJQ:7iXTIpGkkUx9ZLWsROaQ","tlshash":"3323ba11d9c1e46f7c2b8833346a2a39b15bcda6f2295f3bad17aee7d11418c123f950","first_seen":"2026-06-03T10:47:34.569098Z","last_seen":"2026-06-03T10:47:34.569098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brownie.velorahr.com/static/js/main.js","fqdn":"brownie.velorahr.com","domain":"velorahr.com","tld":"com"},"ip":{"addr":"13.249.8.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb","date":"2026-06-03T10:47:07.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.velorahr.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 07 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:E9:41:91:28:73:64:C6:3A:CD:E7:4B:5C:0C:BD:42:EF:60:4C:08","sha256":"0D:A3:BC:3B:B6:E3:AB:2A:D2:FC:19:F9:68:BA:3E:5F:24:75:7B:C9:BC:37:7C:F5:59:6D:9E:3D:BA:DB:7D:A5"}}},"request":{"raw":"GET /static/js/main.js HTTP/1.1\r\nHost: brownie.velorahr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brownie.velorahr.com/sales-assistant-4552?nid=Browni-xixRLb\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: application/javascript\r\ncontent-length: 1200772\r\ncross-origin-embedder-policy: require-corp\r\ndate: Wed, 03 Jun 2026 10:47:08 GMT\r\nlast-modified: Thu, 28 May 2026 08:12:12 GMT\r\netag: \"f31a71bb17a4be57a38bac845ee7380e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 72136be7e2996cd08a1320bb097d5cae.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\ncross-origin-opener-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: frame-ancestors 'self' ats.velorahr.com stg-ats.velorahr.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npermissions-policy: geolocation=(self), microphone=(self), camera=(self)\r\nx-amz-cf-id: wWeJRRfOcLX_jT3tnUuWW0FPhstc_kNxiiX1tdmQsX_H9MTWcfk3qw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1200772,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65474)","md5":"ecc65de9b67f90996931ccc273cb05b1","sha1":"de948531b3dd568f34dcfa9c137e4546e58f23f1","sha256":"04631c49eb35d1a51afb9d0ae3d8850b3b172192882331dd6fa7f3c527461358","sha512":"d0a82d0f74afff0c805509c79a059690aa540463e2dd99afeefa3c4efc5adde3e01e0d2c953d17ed6cc1eac65b3bd59f8060a643a022ae66984e0074c5c91c06","ssdeep":"12288:WoRMT1Tt/sY/IHyjCSRgOhqaKPStPP5jvXSgadlh6ZLshKZCfb2T4AnARONE7YIg:WoRWoyjzRIaoStn5jDdZL0KEON7IVzXe","tlshash":"d7255ad47291f4a24be780e580bf040af33d2d19780d9890f366ecd9b96898da177f79","first_seen":"2026-06-03T10:47:34.571315Z","last_seen":"2026-06-03T10:47:34.571315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-03","alert":"Sinkholed","trigger":"brownie.velorahr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}