{"report_id":"5dcd5f65-f365-480a-8e2e-4a301f9d7198","version":6,"status":"done","tags":["microsoft","phishing","outlook","suspicious"],"date":"2025-02-18T12:00:36Z","url":{"schema":"https","addr":"brandpad.io/lamb-building/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"title":"secure sign-in access"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-29T12:00:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":1858,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2025-02-13T00:28:44.856095Z","alert_count":0,"request_count":1,"received_data":12508,"sent_data":412,"comment":"","tags":null,"fingerprints":null},{"fqdn":"res.cloudinary.com","ip":{"addr":"104.17.201.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-24","domain_rank":2520,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2025-02-13T00:18:08.856208Z","alert_count":0,"request_count":1,"received_data":18988,"sent_data":518,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d2yyd1h5u9mauk.cloudfront.net","ip":{"addr":"54.230.241.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-08-01T17:08:21Z","last_seen":"2025-02-16T07:37:00.549034Z","alert_count":0,"request_count":1,"received_data":3767,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.youtube.com","ip":{"addr":"142.250.74.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":90,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2025-02-12T04:10:48.491328Z","alert_count":0,"request_count":2,"received_data":13836,"sent_data":875,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imcd.godendome.ru","ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-03","domain_rank":0,"first_seen":"2025-02-18T11:18:43.950134Z","last_seen":"2025-02-18T11:18:43.950134Z","alert_count":14,"request_count":14,"received_data":417618,"sent_data":16450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"developers.cloudflare.com","ip":{"addr":"104.16.2.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":592034,"first_seen":"2012-09-07T16:49:35Z","last_seen":"2025-02-11T23:54:18.338027Z","alert_count":0,"request_count":1,"received_data":1654,"sent_data":403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ok4static.oktacdn.com","ip":{"addr":"143.204.55.81","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-11-11","domain_rank":16592,"first_seen":"2018-06-15T05:36:50Z","last_seen":"2025-02-18T11:43:20.69306Z","alert_count":0,"request_count":1,"received_data":11463,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.18.186.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-02-12T02:07:28.994629Z","alert_count":0,"request_count":1,"received_data":4069,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.brandpad.io","ip":{"addr":"143.204.55.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-02-25","domain_rank":0,"first_seen":"2022-11-23T22:49:00Z","last_seen":"2024-02-05T12:43:54Z","alert_count":0,"request_count":3,"received_data":298633,"sent_data":1812,"comment":"","tags":null,"fingerprints":null},{"fqdn":"objects.githubusercontent.com","ip":{"addr":"185.199.110.133","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":134060,"first_seen":"2021-11-01T21:34:29Z","last_seen":"2025-02-12T04:57:10.298777Z","alert_count":0,"request_count":1,"received_data":11086,"sent_data":846,"comment":"","tags":null,"fingerprints":null},{"fqdn":"brandpad.io","ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2016-02-25","domain_rank":0,"first_seen":"2017-09-08T06:18:29Z","last_seen":"2025-02-14T23:14:57.23718Z","alert_count":6,"request_count":7,"received_data":20498,"sent_data":5090,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.heapanalytics.com","ip":{"addr":"54.240.174.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2012-09-12","domain_rank":3660,"first_seen":"2013-08-18T18:41:51Z","last_seen":"2025-02-13T20:57:14.099753Z","alert_count":0,"request_count":1,"received_data":39561,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"scripts.simpleanalyticscdn.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2019-03-31","domain_rank":134219,"first_seen":"2020-01-29T19:11:47Z","last_seen":"2025-02-17T07:45:54.262227Z","alert_count":0,"request_count":2,"received_data":7199,"sent_data":849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"depot.brandpad.io","ip":{"addr":"54.240.174.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-02-25","domain_rank":0,"first_seen":"2022-12-06T02:25:13Z","last_seen":"2024-02-05T12:43:55Z","alert_count":0,"request_count":3,"received_data":32981,"sent_data":2380,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-02-12T01:55:41.567041Z","alert_count":0,"request_count":1,"received_data":14993,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-02-12T02:32:29.360585Z","alert_count":0,"request_count":2,"received_data":17069,"sent_data":840,"comment":"","tags":null,"fingerprints":null},{"fqdn":"heapanalytics.com","ip":{"addr":"3.224.245.224","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2012-09-12","domain_rank":27367,"first_seen":"2013-04-10T12:41:59Z","last_seen":"2025-02-14T10:51:07.8061Z","alert_count":0,"request_count":2,"received_data":1046,"sent_data":2022,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-02-12T01:50:35.062664Z","alert_count":0,"request_count":2,"received_data":199303,"sent_data":873,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec11653f12649cec405ea70747d7d220","sha1":"8189439ecc393bd6d73bc42f92d87224454b571c","sha256":"cc417f00bc300d85769d9fab7581a1d97a6353595b3b7a19da8b196b23a59a9c","sha512":"80dada58fe618a426157a127eb9bf9dbdc0eff7246648f5fb3a2d835459ddef24938869e6957a4fd76121a48e37f1bc3f894fbc0a9e80939669eb5329c8b0ad7","ssdeep":"","tlshash":"69d0970e3d0842251350189b72fbc57c79a510051450d042d04fc88caa34ff9402ab2a","size":230,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-06-05T21:43:24.731903Z","times_seen":5452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-138071656-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f20a5f2a3b55ce7c1470f082a7a8709a","sha1":"6db218be8b1fdff7436553eadc7dd2f2e223dc04","sha256":"bf4d2e727ae94cd9a8bddfb0b985c4409988ea290d7a2d60ffe4cccab5108516","sha512":"1283b99d10f12dd6a02821496a78637174b5b63b8d07a94658bbad1ffac15784e99f61bfc8cc9bf32b2decaf379c6ff6472aabd91be585292b46c45d05f2ab49","ssdeep":"3072:LBtEFe/L4INjLf0/8Prz1+TMtBHN780lq7TVFbZXJu6YO:ZT4IN0WNQwq7TVFbZXMu","tlshash":"fa24e7c8b7d6b42693a36478507f114bb13a6d92f80cdc80e186d8d93e74aa94277f7c","size":226490,"data":"","first_seen":"2025-02-18T12:00:38.394473Z","last_seen":"2025-02-18T12:00:38.394473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e77f16ed118811924ae2ba98c51281f","sha1":"b516df651bf57db20016d9576c2b27348e3d2e50","sha256":"a57f305001f0d44815ccbb6975c1cc8704e2b3cda1cc0f0f24b9d65b825ba3d2","sha512":"2bfbcde35a0bee596192bd7e342a037ff110426ef8693e092edfb3b416d6568baee3af79ea56e91388af8f1755a6cf50e9913aee3a045cdea6fa92bb435ac4d2","ssdeep":"","tlshash":"c5c02bccad07bc7086ef2f43073f395020a3313042d005340401e14ab510db36285cd0","size":132,"data":"","first_seen":"2025-02-18T12:00:38.421669Z","last_seen":"2025-03-04T11:40:20.394831Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@17.6.1/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.186.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31795aa1c340b366676e63269f72a590","sha1":"ff358511dbb93cdd023ed1350c5c58d0f581950b","sha256":"958f80903c3b00a541c8fe1fde4dfe88c3c4b5aaed4e7497d2fdd2262f3417da","sha512":"3bb1d848ea379701fda105d919e65dacf9eac64479db7bf44bc92e0d83dde052e1b61452997cee03216422943c6a1986fc69d55c3eb3e106577b69dec7e26803","ssdeep":"192:vBxOeebEw1h7YxlYemAPt5bM1cLhyd4CemNuW1e07EB1O:vdeoIS/PTGutE","tlshash":"42020f4c7946b02b2873f0f2129f12ca393764426ced6954a6e1f9f82d7849d18a3f7d","size":8399,"data":"","first_seen":"2023-03-07T13:13:55Z","last_seen":"2026-05-29T16:52:47.492029Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"033f55f57a9b2432f39fea75e4e7df71","sha1":"5b04dcff3060be4b7f7e0000014ffba9e9791c31","sha256":"9d3a8a0c7a0d8dfec15e6ec163db07d3aaeb9c26825de2a5e2ba771b1008cde1","sha512":"a24d65463d7283ead0d4349433ce84b280a35845ccd89e4e293468305509a4d6eeb614165fc563bc69f6a110fd277d053388b1fa91977988c3e96835d842c285","ssdeep":"","tlshash":"d6f0ab1e2c1ef4626af51829fb3b8d5a31d5121221862a91d783d96c3970df6e4caa4c","size":422,"data":"","first_seen":"2025-02-18T12:00:38.422543Z","last_seen":"2025-03-04T11:40:20.428021Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"34b4bc89455a0832af7db5d61e0f8eb8","sha1":"87c482204c69a476a38dd862b3517932f2b67a13","sha256":"89a0d15ff27abe461eb37fa7f4280485da52fc67cd1914cd7add690404fd31c3","sha512":"3b00dd5dbb13ea59e1c024fed5c40b31935da8d71e57120d820318c51995bdb5eced0c41b07e78509f958daaf690e4a0e01b5c08e70ebe6f4ca96a22e5e32d6d","ssdeep":"","tlshash":"fbc002b43b15e03515e53825c7579dc4b2ba2305302909a8d59200103327953f488180","size":164,"data":"","first_seen":"2025-02-18T12:00:38.423643Z","last_seen":"2025-03-04T11:40:20.424699Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"06b4b89af63d7f851febec5906cfdd0b","sha1":"90000db80d4b2f885e15ec5053dbc69317a50703","sha256":"642e0885f97ed6cbf7136e43421d3dd084d02b07dfc62a1cc80f42d6f69e3ca5","sha512":"48546d1876fc0b6e83e6612973544f442feb0802ab9389aa89b1404e4452339861febb448939ed4b560b7c2f72aeefdb5f387eaed305007edc9967a257df972c","ssdeep":"","tlshash":"27e0265a3c09c768437535a773bfd7a831715140ad81d422c14ec84c7634feb9412b8a","size":325,"data":"","first_seen":"2023-03-07T12:05:10Z","last_seen":"2026-06-05T20:19:28.906232Z","times_seen":14362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brandpad.io/lamb-building/sandbox%20eval%20code","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-05T22:08:51.189899Z","times_seen":919095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.brandpad.io/legacy_fe/front/vendor.c100ddb6656f1ebf1da1.js","fqdn":"static.brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"143.204.55.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f0e13d05a93a95929442ae1bfb0fb1b","sha1":"4be44d7fa0e18cffea7eb3d714ae6f1ef462aaea","sha256":"f93ab9ac2bf7f36602156d8f94e47f19d86dc8528d82daed8374b3fd8d0dea62","sha512":"640d7565cef2830962a59baf31f4914c6f5a190ad3a468db4ae3e76fa98456fa2b794496f3bd3558cb8671fea03f1eb97f6ba026c7f74ace6a105263ff0e636c","ssdeep":"6144:0o0ZBqPUQcm+DDfL3c0vRD59SQFbf2eAStujZ7KOFsTiGKvmVqffRVqNOkA:qjh61IK+OYNE","tlshash":"75b4d5d976c2f4a143e361b5403f240bf33a2869a84d8454f626d9d9bcb908e9237f7d","size":519057,"data":"","first_seen":"2025-02-18T12:00:38.392531Z","last_seen":"2025-02-19T08:11:05.004026Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scripts.simpleanalyticscdn.com/latest.js","fqdn":"scripts.simpleanalyticscdn.com","domain":"simpleanalyticscdn.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa6014215f23cb3f6cb4902be02d081a","sha1":"44ba2453c2e980ba84602006b4b912736cfd913c","sha256":"a965bdafdcbdf6a1bc0a04fb81ee6d5fb86e1fde7a2da4e8998ab3bcf467bdb4","sha512":"483e8e0a4575808ab0c1262718d85a0b2b9d8bd76d7808ed19050cff3c13690191fe6afb1c9e93576fb153630b413aeffe9fd56bb169d66f97d7fcea1c311917","ssdeep":"192:6n9Sm45t4+zQjmIvpmNbS9l0Qf+JrzI1l8SFOYgGar:6nc3L4KaTvctGjfG3i8SF3TG","tlshash":"b1f1f9ddf2a1f0724792643191bfe61e9237779b3d8b8050aa48d9ecdc748aa0117e1d","size":7515,"data":"","first_seen":"2023-05-06T11:43:24Z","last_seen":"2026-06-05T17:43:12.986902Z","times_seen":1884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brandpad.io/lamb-building/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"59385715db147e992471374dfb65078a","sha1":"5e94cce2f810f1ca32a3580a61d00f05165d5a97","sha256":"ddd33f60c5ef8d953d366f60de2d24376a2b685d8148ee40547647be2dd75ddc","sha512":"4458d1b97587bf8c0aa72af38933f62a852f522655cbfa7ad508280e2a702e867a127d560109db51995425b416102f00d88e7d06d92b40dca424066919078515","ssdeep":"","tlshash":"5ae028da74110c7570dd06f533b1a51c715311086c095c22cffdc91439185c74c134cc","size":340,"data":"","first_seen":"2025-02-18T12:00:38.426261Z","last_seen":"2025-02-19T08:11:04.998385Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.brandpad.io/legacy_fe/brand/main.e595d960c0ac9b45d465.js","fqdn":"static.brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"143.204.55.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d329097a83eb93bd918348dcf43c851e","sha1":"3d9baa8eee764d6440d657b3c9e49bbecd8aaa6b","sha256":"7d746e2587cfec7be0d4a6606d715b3204b8c207fed7d39745dc0812c9bd64ae","sha512":"702db7858386559048b320d3823f5c285ee58b5fa40108c97310b395cf8e8b8e1dc7bf6b933d6feab3d5f3ee3fedb5faf1845dea9a5fc9ed1b6093b24e0e04c9","ssdeep":"1536:uj5BEIDgsZnRLO+VjXHkP9TRDQ30RkXlqdZWtESKZ5:3IHfLOUjUPTDZRkVUWU","tlshash":"1ec391c9b1e6b0b507e721e5403f510be33aa9a5704a80d1f668d9d96c7944ea233f3e","size":120830,"data":"","first_seen":"2025-02-18T12:00:38.427396Z","last_seen":"2025-02-19T08:11:04.997046Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brandpad.io/lamb-building/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a89b9542dd84c69f20e98ddeb09025b","sha1":"86e4f21a5156aa064c9e51dffd1c01790beffc4a","sha256":"17764cdcb53a9517dfbe7286c2371466911cb037c8648920f741942c51b4c0c8","sha512":"89c41a85dce9cf70c028b786cf17266586b15d7458c452bac58fe5940da7737af234eacfc6f4e5078a3da1f150026c4be8ddf178830d61c1f0fe90ba85ca55cd","ssdeep":"","tlshash":"10d0a7663c5784b6af9a44a62e72c65c3bd2500a3d42c193b89cdc056f20fd71e15edc","size":255,"data":"","first_seen":"2025-02-18T12:00:38.429151Z","last_seen":"2026-05-19T03:15:24.04381Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TD7C4N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"993b7b524cb6fd3e70a8cc892006429f","sha1":"212f0ea9afde1f1c2399bdb1ce446976e3d63429","sha256":"3999bef6516270050e81652886b1d30e41b7ad994b7e94d4c0d9ff5212afe8a2","sha512":"f9658ee330a610c9a8fb4e89b456b5abf662f90364ca7cfdb72cb27f7b6a619b58b02be16b60990ecfca5e10b1bef53e4958dc44378f343c86c55e319f398d65","ssdeep":"3072:1x2KXOttEFe/L4IN5i7G0/qtrz1+TMtBHNMJFONalq7TVFEZXJgDIYi:1x2GO5T4INQdWNMFONyq7TVFEZXD","tlshash":"09742bcdb3c6b46693936878503f014bb13a68a2b84cdc84f186c8d93e74aa95177f7d","size":340612,"data":"","first_seen":"2025-02-18T12:00:38.390749Z","last_seen":"2025-02-18T12:00:38.390749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/e7567ecf/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85ccdeaf4aeb05d35d040f8461fc1524","sha1":"776fe7860dd6f3301bb58ba53fa21b308f86e9a4","sha256":"e7e038a97c859394664a2b65bfed05a1571fab38ed1b730b9ff35b222d78f096","sha512":"d237a7bd93542dfef2718f1b81af4d2d7d8c7d1e2c20e5ec64657a61fe7f4c9b011bce412f902ef5278429e32e84dfb063f921b4e4a7a71135eb108831d285ef","ssdeep":"384:9UiDgUXh0Lc0m+g1Rc4OawaBpbDN34tZ4FL4/hwG3OCKIvzupB7K+BDbNXnH/fnV:9bg0gNeRNl4JwGDKIMDlHF19","tlshash":"25e2c6ccbbb1b475037365f5502f100fb23ea8aaa40c8999f188d4e06cb59ad4667f7d","size":31334,"data":"","first_seen":"2025-02-03T14:27:55.900364Z","last_seen":"2026-03-31T20:25:40.645518Z","times_seen":1292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f27ddce3f69b5ff212a6dea8ca9006ae","sha1":"efa006787675969eed6609680fa6a1f8a5faaa81","sha256":"1ca99eac801ff9b2189085b228eef06a62299ef8de760114828cabc840885578","sha512":"ed36cc85a0c39b37c20c283086c18fb6c20cfb6401d52f05fa1b4a295df8f438bb2e31738800c41cdacae5cf4e846b1b86bd79a863df45058bb2951a70350cb4","ssdeep":"","tlshash":"5901259d2f6cc01412650c55777f852dd766724916898862a3e3c45c1961ff9844f749","size":738,"data":"","first_seen":"2025-02-18T12:00:38.430417Z","last_seen":"2025-03-04T11:40:20.391664Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.heapanalytics.com/js/heap-3922783258.js","fqdn":"cdn.heapanalytics.com","domain":"heapanalytics.com","tld":"com"},"ip":{"addr":"54.240.174.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dd13ef70b0d7bac44de060cd78d6f28","sha1":"cfd45b55bc6a0eb7b029cd524bf477b30f674de0","sha256":"7f8082d94ac0467a9fe686d3bfd361692021f198ef89c959e92d9522882b561c","sha512":"f81560d4e34318b030e667b3df43e3fb7afcca8ecf3feacfea434c46ad4feab5919be3adb1f2c6c9396c47734a53c547d404bafc59828a8e88e168c9013fc4ae","ssdeep":"1536:wnzFi1WDBgNVIS84goFJZys5koADcv7G/5uPuVEVGMOt8Wh0t75qca:wzi8e/yMtAsuVEVTW+hG","tlshash":"f5c3e6d9b5c2f0b243a72079507f210af23a5e65a84d9450f223e8d57c3d98e9237e7e","size":121055,"data":"","first_seen":"2025-02-18T12:00:38.395286Z","last_seen":"2025-02-18T12:00:38.395286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-05T22:08:51.196436Z","times_seen":917406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcaa8813f43e4ef20637f10cbad46018","sha1":"b042124a75b5b14075377c372d37cc8b54f84c1e","sha256":"82c966188c05a09d73ba0d283c6b5859cfb3d49ac05a915e56b5762cda7758ea","sha512":"c28df6e595cd7464d0c50b5a4b4711f3e089ce497ca72d1d20da6401c23113f31bab8f6427876ad982554ac5f86fff27ebecf876ecad00058effd3edac27e436","ssdeep":"","tlshash":"ef01dcf6da0e895503e20a28b7fbe6a9f24d304b10309050e2874da4b808ebb013a5e5","size":684,"data":"","first_seen":"2025-02-18T12:00:38.431813Z","last_seen":"2025-03-04T11:40:20.422591Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scripts.simpleanalyticscdn.com/auto-events.js","fqdn":"scripts.simpleanalyticscdn.com","domain":"simpleanalyticscdn.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"617d85db1b8d137614c3c3b2f92081a4","sha1":"ec82a0324e3fa5f1d60ccd922590bd1252a49b5d","sha256":"9b0af42637fc5ddf78c5a53922baa0e1588f3754975b9a18d9e487a5c3962ef4","sha512":"052750bec82b62de4ed9225b9f94da16a083fdaa134704f23e876eb4752987754a46f7343a02903e05044fc00e328dfb4902b44fa93a7f3fceb8f78262019a98","ssdeep":"","tlshash":"8b5173feb208e9b61614dc5b48be7e35993b615134038850b9d9ed4fd038cb246fec8a","size":2765,"data":"","first_seen":"2023-08-06T14:04:03Z","last_seen":"2026-06-02T19:25:25.250269Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brandpad.io/lamb-building/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"39572f67203c07db71712617ef946a06","sha1":"8a6b9dc23b29e24dee1534ebbc5f3ddc99b91990","sha256":"6343aad7421f6d594d15a6a08c4e03a669c0d97ce82bbac2f475d403a78e9b35","sha512":"a1bdc7f78796c3c6692fdcb87d237589dd9ccea5a3466ca7b5b39ee4cfb86f59578f1428797c58275bf0d687806b15e09f4d08d3bd1d5df663c73cd897daabc2","ssdeep":"","tlshash":"d441ef8d77f3863588237c188b3f3584732669130844ec123d0dc241ff89a2eaab1eda","size":2188,"data":"","first_seen":"2025-02-18T12:00:38.43282Z","last_seen":"2025-02-19T08:11:05.002215Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"85c0dbebc674bb9fd24fc4f28fb42a0b","sha1":"66e2b06bc8be683b8ee999bd682565a18e3f3569","sha256":"41f62ba327dd37863508090a20fd10170ccbd25f546d4c0b7ccc542112488b73","sha512":"736c999ffc0e51dcc91b2c2d1c41cd5e865435436608113b6f7810778fde2ca1ce0b87e513909dcee5d4b1570419aea84279553c8cb0444b86e51b21aef83701","ssdeep":"","tlshash":"94c04cb03f15b03615f53835c317ddc4f1bf3305702908acd59200203727953f888581","size":164,"data":"","first_seen":"2025-02-18T12:00:38.433684Z","last_seen":"2025-03-04T11:40:20.413415Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/api/player.js","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c70c0286de8a57afc927525569744f2","sha1":"ac88493b107c5e823fe260bf5e525b66e2c1f6d6","sha256":"75108c97d7cf8d7b6451649caa51be93a2690daa5c91a6dca3d932b320f70dfd","sha512":"f50f6602a0ab99fe7f5ce5c4022ff731e8ee9554def22e5ae893f23e208f4ba36aa7f071127252621b8c6e64e032fde85f26d2a348d752cb59cd678c7a6d8d37","ssdeep":"768:o5veG0+6ihBBT+MGGgCEYBEZ9yEfkSEVdYGQO2SlT6qFOTH2:o5veGsacGrEGEZ9yinO2SeW","tlshash":"4a03b49c72c3f4714397b53a542f210bf23529a9644cc490e635e8e2bdb498f9627fb8","size":38224,"data":"","first_seen":"2025-01-24T14:18:36.450756Z","last_seen":"2026-05-10T14:26:15.829649Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1198dec7183d584d0a1d7c6e53137dcc","sha1":"71f5f44fe601013881dbcf7d5da90392f6886d0f","sha256":"e277424278129d176e247dd8f1a22d667a43502d99330f3575bcdc74949322d5","sha512":"c08d64b2b65a056a5acf10a82edd6c7cc11f7f189c0d973e26ed2a2002f86036caa1751754316ccab144aca46e12f505aa49edcbd06da66b2af5b0fd2e3f39a2","ssdeep":"","tlshash":"43e0c0892c1c6443a9e1093922bb8e1b31d6150020950f60d1cac9ce3872cff400ad48","size":339,"data":"","first_seen":"2025-02-18T12:00:38.434702Z","last_seen":"2025-03-04T11:40:20.424201Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"85bd48ddc625c9dc291ca3c1a62fda7f","sha1":"b94956e1850a473f3816eb902bd2289c88bb9075","sha256":"67924b0ad89afa6ebfcadc51fad09d1862fce0c229112c579a349c324d21be2b","sha512":"284842f4c412beae6f3bc97482a0c6e018ce04f235b69edde9d7fc250f670dbed99535801f1d398dbedb42f6033ae921a7ff38f9006ef94eafd2f90e53804559","ssdeep":"","tlshash":"a0e02d8cfc6c824c445b0f26a07b87fc2040080d2ea0081300d0c1dc7e11fee02cb81c","size":327,"data":"","first_seen":"2025-02-18T12:00:38.435535Z","last_seen":"2025-03-04T11:40:20.416951Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"729a012c1a52b6503d9cf586a580b958","sha1":"0fd30580bbfc8f45e10ccbdfdc2974b838bd03a5","sha256":"90b7fd1ac9d9948c1d1445501f94dc854ee4b93fa9cbedc4247452921bfe2bb8","sha512":"d427ec10279820762876d45fdd6b19f925dd133284c3a05551915828c08feb1bde005fa2db40fb342e1075508541ee71de33e2d28dc24823a803f956b1b06b76","ssdeep":"","tlshash":"d711ef3b7d44d2250658acb4a13fc37cb16160556880cc91508de85de61c6e6de3e4ac","size":993,"data":"","first_seen":"2025-02-13T18:23:07.733588Z","last_seen":"2025-02-19T16:04:11.743154Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/zw1HLQQVqfChjTJO/delighted.js","fqdn":"d2yyd1h5u9mauk.cloudfront.net","domain":"d2yyd1h5u9mauk.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec780e7febfa607109c27aba308248a4","sha1":"303ca6a286592c53f89d3cbd74dfbebfc1267760","sha256":"bffc53a34a16569907097bdba6121f043e9a2bdc205aae412e23666b0e47ce71","sha512":"7cb2c1b19e837b64dc2c8838f4e8c0fbe3480389f5ec542a2e61db113bb69e07f787ab1fecc942a3b84a71f055243f69447980514d3b009efc20d4e9a95c6144","ssdeep":"","tlshash":"0fc08c122fa86031222014390d02c00b71e094004d2bf90c3d0c0d4c3bd0cf640032ea","size":159,"data":"","first_seen":"2023-03-14T19:53:56Z","last_seen":"2026-05-26T09:02:03.768532Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"7946ee29b589bc40eb387d35248b13ae","sha1":"95f775508d82361abf7c5f885e7ea989dbaba0e1","sha256":"e1687f5a203a15fd8c5bd995550db3445c92e87af7d8b17fed6a3c1477dfeb80","sha512":"e18a164dab083e1f6a8dd608e86c0111402036c693f1392c25c4475aa63d05064103d199899f2b51e6e85f2f8c466f074fb6f5f86865b6d6eb44467b2dc8ea32","ssdeep":"","tlshash":"e48000a8bb03c88c082080ac08a0aa008ca0c2c020b208883e0a0c03e800b2ba0fc02c","size":34,"data":"","first_seen":"2025-02-18T12:00:38.436499Z","last_seen":"2025-02-18T12:11:55.479079Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"8d512e846298023939be550f5e331207","sha1":"18766a05dc67994556a8ca4f4961a4388f07c5b5","sha256":"0c3d0e21e6dd734c903da28d9f3f9d3902e69f8f555c678771576275e689d508","sha512":"1d139197f15fc7eba4e17d267ad1e7db4146e18544f2d83cc3f30683d44bb2339afe3dfb59eef42c814853003d8a02299770b5195eb63e299759e6df11167694","ssdeep":"","tlshash":"ca31cb9bb0b650303132b1be437f36913e3681d760984a74725c0fb4bfd268b02a2989","size":1744,"data":"","first_seen":"2025-02-18T12:00:38.437499Z","last_seen":"2025-02-18T12:00:38.437499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fcd362718f1217d7b0b2e950e1169c29","sha1":"c1e751b7b074b30b6e6b85ef802e59fa177ed1f0","sha256":"a0b014909173f67e73d062aa78d521cc2b2f7aa51f7910d281063fa1e8d024e8","sha512":"8e1b60109c95f1835c5d2fbc81cf7dcf58b7dd6c2db3d7f1a1acefc68692fad1ef26c2a225912b54d21805d944ac6e7d1f139b34ec413924acf7ecb4bf3d65d9","ssdeep":"96:8ByDQbDP7wM8LGAD6aV77ut2ib8iKD8i2iAiKiJiBeSvTZJJHyfLIi9:myDQbDP7wMalD6aV77ut2ib8iKD8i2iB","tlshash":"61a1a41bae8f0d11636ba91b05de87d1382c531e58c6808c7e1ee9944f1ca7a64d83dc","size":4900,"data":"","first_seen":"2025-02-18T12:00:38.43836Z","last_seen":"2025-02-18T12:00:38.43836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e02c5cea485ebc4c57548fb383b0fe08","sha1":"46ca89bcbd64f2c27cb2147b23ff976c7d93ebeb","sha256":"944a843f8023cf4d833b53d7714e30bdb2aa2625248becc7c38e4de9ebf47071","sha512":"8de123f4ef7a5c0c8f13cbfc3f998a89c3af3b99a9a1206eba2e2201078e0ec2380a4de176a70da4fdc2fa88557048c0c9f5f4612843549df09442b3f967d068","ssdeep":"1536:D18pha1bOB6uru7Z6/tJd21r58VoJPVqZy3ajla+NUdmWb7CAFy1xdpks5wd61T8:DOP5k4D6giKLPGKM0z27+HEQ1gQr8F/","tlshash":"7214a372479c3fc5cd59e900fbb9c62a830514336422e497cb2e3d9c7e9c99ad481e9b","size":198175,"data":"","first_seen":"2025-02-12T21:51:37.491852Z","last_seen":"2025-03-05T21:26:41.946028Z","times_seen":5350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e45468067d4b1ba8f34db3f9ac85fd5","sha1":"7ecbf5f46bb0bbfa36b800335332b13e90a3f9a5","sha256":"6aba7be0b7b090268209e2cd66df2998f2cb76ac86afc99f308af16760dae123","sha512":"cc77c750fb3ba66822f4360d9c1da86036414d796656666619771610d87c9ebaaba102abd6ec5761a6b7208102db8666745ba97d437e20e754851a585180b5e6","ssdeep":"","tlshash":"a0316c5af15564b5367573be633fa640fa368267a080022435bc0ee53ff268342a7d9d","size":1793,"data":"","first_seen":"2025-02-18T12:00:38.440157Z","last_seen":"2025-02-18T12:00:38.440157Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4bfe9e9f52aafed52379f94f50ffd93c","sha1":"df060359f1021240af0749205fe05ae81353de6d","sha256":"dfc88b8f9cdeb80f4b88356412ef31ad2bd1d18bda9613d64a999fe834a282d7","sha512":"756d5913801f6e9fc3786c9439ecf8ad90b9d7644861f3dae88314eb4973a850a08105dfab44e45119559a027fde65531f4d6dbc02ec5667ee3ec22cbac20591","ssdeep":"384:A0hb5VF637SNcl1aHgc8iIieMi4ic18GYOixIB/W:A0rVFJxlQVc18GkxD","tlshash":"7b42509a302514708af736f7b1b74284b93161376e80d522f4bcc95d2f729c1a2b7ee9","size":13155,"data":"","first_seen":"2025-02-18T12:00:38.441046Z","last_seen":"2025-02-18T12:00:38.441046Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_j3kdy1s9x2iokjd","sensor_type":"yara","title":"","description":"Private YARA rules","scan_date":"2025-02-18","alert":"Tycoon_AitM_API_Callback","trigger":"javascript.eval.md5:4bfe9e9f52aafed52379f94f50ffd93c","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"author":"Mike","date":"2025-01-29","description":"Detects API callbacks from Tycoon AitM after successfully completing the Cloudflare Turnstile challenge","rule":"Tycoon_AitM_API_Callback"}}],"urlquery":null}},{"md5":"e9ce3aa8ed1847c1d2e608dcd8445713","sha1":"c9cfe3514bad81fa8149990266572b73e14e2cd1","sha256":"b51043dd7aaa1bc4205fc0f00653c26b8d92f836198668cc92b7902493ba2bf5","sha512":"356622565f8ef4f424d79834c748cd82fa26da42311e837aa0ddd4c158d9d54e4a8d55ae827ad0137629d427feb4e5b1dabf4d4ade69d55710a4e2552d38d890","ssdeep":"3072:/pykJcRR8cr7yRXjc7El8c6odqz+N4wNb6htHOQYGUsnNymSibsmSiTO0S:BykJcRR8cr7yRXjc7El8c6oUgws","tlshash":"51e385411ea08d4e27861a7f3136b0e4f9650b5d3942e995f19cbc9c23e2713f9f28b2","size":148618,"data":"","first_seen":"2025-02-12T21:51:37.489451Z","last_seen":"2025-03-02T04:44:16.586821Z","times_seen":4685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"b460f8d5698cb2383d857e6fcd0e4138","sha1":"ef3072974286895443f5c9252735d0fd391410be","sha256":"864d32cac32bc66b4004d8b8e6e61800a15b187fc745207864da2fe225b44abe","sha512":"d488da01ab1b3d09b6831e4c0555c8fdc0db6e903127a42b465bf493780745d5e82f52021ab3c7098a201630f88e9882bcf0422d7611507e7991d47ce87723bf","ssdeep":"96:/VLJX8DjGP78nFbtN+LP8LGTOH9aGwDhMAk9oBRyPdzxeAko9RAq9juv+kM:/J8SPonptYraGOdD0k2B4NH9R39juvE","tlshash":"7102d64aad0b2d4193b07a2619dea4d49c3e47ea5480418b3508fac5bf7817e19ddfec","size":8281,"data":"","first_seen":"2025-02-18T12:00:38.442579Z","last_seen":"2025-02-18T12:00:38.442579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"95b7ecad4204495ca79a276f3a999b1b","sha1":"b98e56ad4ab799c2b2258c2feaf16e3d74612b83","sha256":"ede014f19a623389c74475bf61fa3a1e15e356bb91b72788234710139a315807","sha512":"053b85361a33972bdd6654aeaa7e52ea6bcf24f421f7b9a56adfd3841e543b72a12e79d975d2b85126039542827874475101ad42f6cf9f02bebb2fd5fd215c36","ssdeep":"3072:UihIVehDsi29qDNxtIhDoDsthTDIfIBYjhDLyhfjfpn/BegDfIBYjhDLyTn/BegM:UihIVehDsi29qDNxtIhDoDsthTDIfIBD","tlshash":"55e3d93711f10426606240a16d2fef5fea5583ea828741347decfadadbbdc0d981eb94","size":143957,"data":"","first_seen":"2025-02-18T12:00:38.44347Z","last_seen":"2025-02-18T12:00:38.44347Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b083e429ae128ba2a6daf77e6296353f","sha1":"b751273e6f8ea7719e5098d702b914b4cd5caeb3","sha256":"0256c44c75b10808a3b15122222951608f2886687097cadc6790664d4bf3a8a2","sha512":"80a1d4696c2687f95fb0b7f4f739423c1bcb0951c9a14d3fb0f5b5fe7c89ba950f805e89f5d76575fe47907d536723b4a6cc67e0f572b7a9fca1c7559154d7e0","ssdeep":"384:lVTO5hkAfZ9/E5JZTU/DsZyb/9Gi6ci4zslLmalU/hYzHtykBM:lVu/fZ929i6cioEmalU2i","tlshash":"8dd3033ff246237fa2c2ceab36a36e1d20123d9ad10f47149167b753b7823bd0956694","size":134278,"data":"","first_seen":"2025-02-18T12:00:38.444336Z","last_seen":"2025-02-18T12:00:38.444336Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"brandpad.io/lamb-building/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-18T12:00:10.569Z","timestamp":1739880010569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brandpad.io","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jan 2025 23:11:00 GMT","end":"Sat, 19 Apr 2025 23:10:59 GMT"},"fingerprint":{"sha1":"4F:B1:61:B6:21:56:4A:B4:11:57:1B:DA:30:E3:56:41:02:84:77:CE","sha256":"89:1F:F6:E7:C9:F2:05:9E:88:A5:D5:5E:5F:A9:AF:D1:28:61:2C:9D:EC:D0:D4:89:EC:9F:1E:B9:E9:AD:16:8F"}}},"request":{"raw":"GET /lamb-building/ HTTP/1.1\r\nHost: brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Feb 2025 12:00:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 15638\r\naccess-control-expose-headers: X-CSRFToken\r\nx-csrftoken: ImY2OGU3ZDE3MjUzMjg2MDVkYWFhYzgyNzEzYWEwZGVhNTU2NDE0YTci.Z7R2Sg.j5SEgYwTh8fzf1Z_cMLHuoPne8Q\r\nvary: Cookie\r\nset-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sg.IS2rmaWt1BJa5nKVp7kGcgsCwQg; Domain=brandpad.io; Expires=Thu, 20 Mar 2025 12:00:10 GMT; Secure; HttpOnly; Path=/; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15638,"size_decoded":15638,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1576)","md5":"4171cb672055daf4f5a2a521a335ab4c","sha1":"be03b0ac1d0425296c874e71cc3f6facc38901df","sha256":"23b3485755ca8ba1a1ccfa3f8456530e7a683f02400a103c05c194e1f2681e73","sha512":"e328c471f558863dcdedb756612722c5c418529880e8c65a51850d504cfc5ff153c899190d4b6f8278f5cf62d5a2d640f769eb7fe570efa68cc02e2e85ea9b39","ssdeep":"192:fZrzc3LtK2QzBog2dWyDxeSypUw8EgaEoY1uY2k26G8xDJx6Gq:f2LtJcIuY2kW8x/e","tlshash":"8862d66b9d23c4da921684b63bfb3218e706700fe995cc59f69c404daf81f9504a33dd","first_seen":"2025-02-18T12:00:38.387475Z","last_seen":"2025-02-18T12:11:55.40683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":188,"dns":0,"connect":23,"send":0,"wait":68,"receive":1,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@17.6.1/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.186.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.072Z","timestamp":1739880011072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 May 2024 00:00:00 GMT","end":"Sun, 04 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE","sha256":"5E:14:CC:02:38:48:65:94:0B:A2:7E:3B:03:3F:E9:6A:FA:F1:0E:05:E5:16:71:83:BF:23:D4:AB:B1:A0:AC:73"}}},"request":{"raw":"GET /npm/vanilla-lazyload@17.6.1/dist/lazyload.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2920\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 17.6.1\r\nx-jsd-version-type: version\r\netag: W/\"20cf-/zWFEdu5PN0CPtE1DFxY0PWBlQs\"\r\ncontent-encoding: gzip\r\nx-served-by: cache-fra-eddf8230095-FRA, cache-lga21977-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 21601662\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=v%2B4%2FzgcmEbQDSMASBLb3k2bT6IiFK1yVZnNq9A3sCy9CoUfOEgwul87Y9pdRai8j%2BE6nhijd7hoMDo8lk0Y0TQbcfHe4ApYP0FZTmsGDkVyvL2%2FfWQYPLsnG6Cb2pXzYRUU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 913ddaf54d8f712e-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2920,"size_decoded":8399,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8398)","md5":"31795aa1c340b366676e63269f72a590","sha1":"ff358511dbb93cdd023ed1350c5c58d0f581950b","sha256":"958f80903c3b00a541c8fe1fde4dfe88c3c4b5aaed4e7497d2fdd2262f3417da","sha512":"3bb1d848ea379701fda105d919e65dacf9eac64479db7bf44bc92e0d83dde052e1b61452997cee03216422943c6a1986fc69d55c3eb3e106577b69dec7e26803","ssdeep":"192:pDvu5/lEKbxrZbwxlYemmt5TM16LcfIJC0mhuW1e07EB1Y:pTw/u6khjJwuty","tlshash":"1d0253487d06b02f2873f0f6118f12ca393b24526ced6954a6e1f9e82d7848d18a3f7d","first_seen":"2023-03-07T13:13:55Z","last_seen":"2026-05-29T16:52:47.492029Z","times_seen":119,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":12,"dns":1,"connect":2,"send":0,"wait":12,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/api/player.js","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.066Z","timestamp":1739880011066,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jan 2025 09:46:48 GMT","end":"Mon, 21 Apr 2025 10:46:39 GMT"},"fingerprint":{"sha1":"C2:BA:3B:38:75:6B:6A:31:07:E4:AE:3E:DA:0D:F6:B1:41:72:4B:FB","sha256":"BB:8A:A2:6B:D7:35:38:78:99:78:FA:3D:91:63:6C:C2:4D:C1:8F:AC:2D:94:4A:30:CF:BF:ED:20:2B:8F:D5:B9"}}},"request":{"raw":"GET /api/player.js HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Feb 2025 12:00:11 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nContent-Length: 11437\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nCache-Control: max-age=1800\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'\r\nexpires: Tue, 18 Feb 2025 07:30:11 GMT\r\nx-player-backend: g\r\nx-backend-server: srv001\r\nx-bapp-server: \r\nContent-Encoding: gzip\r\naccept-ranges: bytes\r\nAge: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma1668-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1739880011.108893,VS0,VE239\r\nvary: Origin, Referer, Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=epHR0dLyGK57ZQb3hZ4qzw.X2ncT8NwBwhThFMLFclA-1739880011-1.0.1.1-CFvtAAYC_2lvsIfJxmIyAGOpU9r.Ml7TpQJQx62QqgSe5VdqpaSwp0QEcC61M3CJ; path=/; expires=Tue, 18-Feb-25 12:30:11 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None\n_cfuvid=UU07zTLGKvwdmGx5twEzvyj8.zX5uPP.PA0nZppckLI-1739880011353-0.0.1.1-604800000; path=/; domain=.vimeo.com; HttpOnly; Secure; SameSite=None\r\nServer: cloudflare\r\nCF-RAY: 913ddaf54a0056a3-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11437,"size_decoded":38224,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38100)","md5":"2c70c0286de8a57afc927525569744f2","sha1":"ac88493b107c5e823fe260bf5e525b66e2c1f6d6","sha256":"75108c97d7cf8d7b6451649caa51be93a2690daa5c91a6dca3d932b320f70dfd","sha512":"f50f6602a0ab99fe7f5ce5c4022ff731e8ee9554def22e5ae893f23e208f4ba36aa7f071127252621b8c6e64e032fde85f26d2a348d752cb59cd678c7a6d8d37","ssdeep":"768:o5veG0+6ihBBT+MGGgCEYBEZ9yEfkSEVdYGQO2SlT6qFOTH2:o5veGsacGrEGEZ9yinO2SeW","tlshash":"4a03b49c72c3f4714397b53a542f210bf23529a9644cc490e635e8e2bdb498f9627fb8","first_seen":"2025-01-24T14:18:36.450756Z","last_seen":"2026-05-10T14:26:15.829649Z","times_seen":271,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":24,"dns":5,"connect":3,"send":0,"wait":264,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TD7C4N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.088Z","timestamp":1739880011088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jan 2025 08:35:27 GMT","end":"Mon, 21 Apr 2025 08:35:26 GMT"},"fingerprint":{"sha1":"65:8D:A3:B8:35:26:DF:86:1E:F6:68:B3:C0:3F:9A:71:5D:3D:F0:F1","sha256":"4F:72:70:C9:E0:56:46:A8:C1:50:F4:98:46:A9:C2:5C:5B:F3:63:81:7F:F9:DF:5D:9D:BE:B1:5C:1C:50:78:BB"}}},"request":{"raw":"GET /gtm.js?id=GTM-TD7C4N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 18 Feb 2025 12:00:11 GMT\r\nexpires: Tue, 18 Feb 2025 12:00:11 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1245:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1245:0\r\nreport-to: {\"group\":\"ascgcycc:1245:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1245:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 116560\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116560,"size_decoded":340612,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17059)","md5":"993b7b524cb6fd3e70a8cc892006429f","sha1":"212f0ea9afde1f1c2399bdb1ce446976e3d63429","sha256":"3999bef6516270050e81652886b1d30e41b7ad994b7e94d4c0d9ff5212afe8a2","sha512":"f9658ee330a610c9a8fb4e89b456b5abf662f90364ca7cfdb72cb27f7b6a619b58b02be16b60990ecfca5e10b1bef53e4958dc44378f343c86c55e319f398d65","ssdeep":"3072:1x2KXOttEFe/L4IN5i7G0/qtrz1+TMtBHNMJFONalq7TVFEZXJgDIYi:1x2GO5T4INQdWNMFONyq7TVFEZXD","tlshash":"09742bcdb3c6b46693936878503f014bb13a68a2b84cdc84f186c8d93e74aa95177f7d","first_seen":"2025-02-18T12:00:38.390749Z","last_seen":"2025-02-18T12:00:38.390749Z","times_seen":1,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":172,"dns":15,"connect":21,"send":0,"wait":47,"receive":61,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/brandpad/image/upload/c_scale,dpr_auto,f_auto,w_1280/v1739874338/32079/gf_ccfd565c","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"104.17.201.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.064Z","timestamp":1739880011064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 23 Apr 2024 13:44:07 GMT","end":"Sun, 25 May 2025 13:44:07 GMT"},"fingerprint":{"sha1":"44:22:C9:20:F7:22:75:74:CA:13:F8:00:EB:CC:46:77:7E:66:AA:2B","sha256":"ED:77:80:2E:D3:23:96:3C:E3:2E:CB:69:44:19:A7:0D:C4:FE:A7:96:67:45:94:0A:E1:B8:55:44:26:D5:6B:1E"}}},"request":{"raw":"GET /brandpad/image/upload/c_scale,dpr_auto,f_auto,w_1280/v1739874338/32079/gf_ccfd565c HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17916\r\ncf-ray: 913ddaf558cbb512-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: private, no-transform, immutable, max-age=2592000\r\ncontent-disposition: inline; filename=\"gf_ccfd565c.webp\"\r\netag: \"eed419e9127e1a57b087dbfe63ab2490\"\r\nlast-modified: Tue, 18 Feb 2025 10:59:13 GMT\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,DPR,Sec-CH-DPR, Accept-Encoding\r\naccess-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,x-content-type-options\r\ncontent-dpr: 1\r\nserver-timing: cld-cloudflare;dur=291;start=2025-02-18T12:00:11.101Z;desc=miss,content-info;desc=\"width=1280,height=394,bytes=17916,format=\"webp\",owidth=1034,oheight=318,obytes=178140,oformat=\"png\",crt=1739876352,ocrt=1739874338,ef=(1,11,13,17,97);\";cloudinary;dur=26;start=2025-02-18T12:00:11.277Z\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-request-id: 5114209cea35f5abacedb6969a9ab290\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17916,"size_decoded":17916,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eed419e9127e1a57b087dbfe63ab2490","sha1":"39219c937f156af96009a8debbe5c919f315285e","sha256":"e0cdea399bd00ca32d7bc79372504b9112bb5ea7ffab47ec1e81b1af8d2b3490","sha512":"ca8eb3359941c14adc237bd0fad1a1227059d284461f83420434191bacf37d317bd1ea17d989e16c8b389492619a8c7a8587ff3fdf6bd6d2b37e5a12d371dff5","ssdeep":"384:cYNg7tYZf1QDf+nyupEh5GbZiRrMRdvz9hbtfdKA2x7eN7qR9T:cYypaf1QR8ZiNMT79hb9W7eNG9T","tlshash":"5382afb49782f682f871c971a8931b52f2977f3c9671b703916c512a3126996ce0a3cc","first_seen":"2025-02-18T12:00:38.391572Z","last_seen":"2025-02-18T12:11:55.410409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":29,"dns":17,"connect":1,"send":0,"wait":304,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.brandpad.io/legacy_fe/front/vendor.c100ddb6656f1ebf1da1.js","fqdn":"static.brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"143.204.55.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.068Z","timestamp":1739880011068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.brandpad.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 03 Jan 2025 00:00:00 GMT","end":"Sun, 01 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:D4:81:BD:4E:88:92:9D:31:95:1A:7A:19:2D:01:63:5A:F0:7D:BF","sha256":"62:92:45:EE:0E:43:47:FB:BF:84:9C:BE:15:35:8A:2D:06:A4:10:6E:1E:BD:96:E8:E1:03:0A:13:EA:C6:9A:20"}}},"request":{"raw":"GET /legacy_fe/front/vendor.c100ddb6656f1ebf1da1.js HTTP/1.1\r\nHost: static.brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sg.IS2rmaWt1BJa5nKVp7kGcgsCwQg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Mon, 17 Feb 2025 17:49:48 GMT\r\nlast-modified: Tue, 11 Feb 2025 07:49:40 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"2f0e13d05a93a95929442ae1bfb0fb1b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: 4bBIbZ9Hd93iqsgXN9EuqT5wWNUwyMiuNMZ9G-brrRw6Uow2tF4LHQ==\r\nage: 65424\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123916,"size_decoded":519057,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2f0e13d05a93a95929442ae1bfb0fb1b","sha1":"4be44d7fa0e18cffea7eb3d714ae6f1ef462aaea","sha256":"f93ab9ac2bf7f36602156d8f94e47f19d86dc8528d82daed8374b3fd8d0dea62","sha512":"640d7565cef2830962a59baf31f4914c6f5a190ad3a468db4ae3e76fa98456fa2b794496f3bd3558cb8671fea03f1eb97f6ba026c7f74ace6a105263ff0e636c","ssdeep":"6144:0o0ZBqPUQcm+DDfL3c0vRD59SQFbf2eAStujZ7KOFsTiGKvmVqffRVqNOkA:qjh61IK+OYNE","tlshash":"75b4d5d976c2f4a143e361b5403f240bf33a2869a84d8454f626d9d9bcb908e9237f7d","first_seen":"2025-02-18T12:00:38.392531Z","last_seen":"2025-02-19T08:11:05.004026Z","times_seen":3,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":85,"dns":73,"connect":3,"send":0,"wait":1,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"depot.brandpad.io/fonts/Graphik-Regular.woff2","fqdn":"depot.brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"54.240.174.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.263Z","timestamp":1739880011263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"depot.brandpad.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 03 Jan 2025 00:00:00 GMT","end":"Sun, 01 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"59:FD:4D:36:80:8E:07:5C:FF:4D:A3:D0:D6:83:14:05:60:47:F1:48","sha256":"E2:75:29:35:62:1F:82:24:DD:E7:5C:7E:69:6E:73:11:E5:B1:BF:ED:13:DB:07:E9:C3:6F:0D:D3:AF:F8:D8:74"}}},"request":{"raw":"GET /fonts/Graphik-Regular.woff2 HTTP/1.1\r\nHost: depot.brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://static.brandpad.io/\r\nOrigin: https://brandpad.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/font-woff2\r\ncontent-length: 27888\r\ndate: Tue, 18 Feb 2025 11:57:56 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Mon, 16 Jan 2023 11:51:15 GMT\r\netag: \"12185915619bb21543149e6b44c1f01e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: w7qcOqE2_UtOenNGKdpaMYdRhAaIZJDhfD6qZVL8ZekIW_SMl6uHFQ==\r\nage: 136\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27888,"size_decoded":27888,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27888, version 1.0","md5":"12185915619bb21543149e6b44c1f01e","sha1":"acd6b92e12a4388d63ab3cbabec4f503454f4703","sha256":"0c26c78c1ce20fea8010fb49a8d56ea59026272a5dc4120718d626a14a8cc87f","sha512":"9b8b7e9c10fd28d60093c5fbef9a5da38a572d7042d7dade1ea89970233bb6be1a522262d4227751f2f7ea444766ef0a0fc5d9704ec7dae1b29f6e385cf3c45d","ssdeep":"768:T/flSxgOFkJQgZzZ2Jqb3nmtTYiCEx2Ye7686Kulc9jcw:T/dMJkUJqb3nmRDCEZeCKF9jt","tlshash":"02c2e0b62e3f4386b6218db2320adf70e4b019152b2b344c54f8e359d657a751abcf1b","first_seen":"2025-02-18T12:00:38.393494Z","last_seen":"2025-02-19T08:11:04.977536Z","times_seen":3,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":244,"dns":79,"connect":1,"send":0,"wait":3,"receive":1,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-138071656-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.587Z","timestamp":1739880011587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jan 2025 08:35:27 GMT","end":"Mon, 21 Apr 2025 08:35:26 GMT"},"fingerprint":{"sha1":"65:8D:A3:B8:35:26:DF:86:1E:F6:68:B3:C0:3F:9A:71:5D:3D:F0:F1","sha256":"4F:72:70:C9:E0:56:46:A8:C1:50:F4:98:46:A9:C2:5C:5B:F3:63:81:7F:F9:DF:5D:9D:BE:B1:5C:1C:50:78:BB"}}},"request":{"raw":"GET /gtag/js?id=UA-138071656-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 18 Feb 2025 12:00:11 GMT\r\nexpires: Tue, 18 Feb 2025 12:00:11 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1003:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1003:0\r\nreport-to: {\"group\":\"ascgcycc:1003:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1003:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 80766\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80766,"size_decoded":226490,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2097)","md5":"f20a5f2a3b55ce7c1470f082a7a8709a","sha1":"6db218be8b1fdff7436553eadc7dd2f2e223dc04","sha256":"bf4d2e727ae94cd9a8bddfb0b985c4409988ea290d7a2d60ffe4cccab5108516","sha512":"1283b99d10f12dd6a02821496a78637174b5b63b8d07a94658bbad1ffac15784e99f61bfc8cc9bf32b2decaf379c6ff6472aabd91be585292b46c45d05f2ab49","ssdeep":"3072:LBtEFe/L4INjLf0/8Prz1+TMtBHN780lq7TVFbZXJu6YO:ZT4IN0WNQwq7TVFbZXMu","tlshash":"fa24e7c8b7d6b42693a36478507f114bb13a6d92f80cdc80e186d8d93e74aa94277f7c","first_seen":"2025-02-18T12:00:38.394473Z","last_seen":"2025-02-18T12:00:38.394473Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.heapanalytics.com/js/heap-3922783258.js","fqdn":"cdn.heapanalytics.com","domain":"heapanalytics.com","tld":"com"},"ip":{"addr":"54.240.174.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.576Z","timestamp":1739880011576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.heapanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 29 May 2024 00:00:00 GMT","end":"Thu, 26 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"17:94:D8:DF:31:F3:1D:D6:74:B7:A8:EF:8F:D2:6A:57:93:D1:80:7F","sha256":"9A:D2:F3:05:1D:0D:C8:66:22:EA:C7:B1:1C:8D:AD:8D:52:41:A5:4B:8F:AB:FC:13:F3:71:7A:74:F6:A8:B1:F5"}}},"request":{"raw":"GET /js/heap-3922783258.js HTTP/1.1\r\nHost: cdn.heapanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 18 Feb 2025 11:59:20 GMT\r\nserver: nginx\r\nx-powered-by: Express\r\netag: W/\"1d8df-z9RbVbxqDrewKc1SS/R3sw9nTeA\"\r\ncache-control: public, max-age=120\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: SS8HHkSGacFkWL9EOCoEmkJe1PUQ-1wwymwIi2_ow0sdHidMjZOMCA==\r\nage: 51\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38929,"size_decoded":121055,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65502)","md5":"6dd13ef70b0d7bac44de060cd78d6f28","sha1":"cfd45b55bc6a0eb7b029cd524bf477b30f674de0","sha256":"7f8082d94ac0467a9fe686d3bfd361692021f198ef89c959e92d9522882b561c","sha512":"f81560d4e34318b030e667b3df43e3fb7afcca8ecf3feacfea434c46ad4feab5919be3adb1f2c6c9396c47734a53c547d404bafc59828a8e88e168c9013fc4ae","ssdeep":"1536:wnzFi1WDBgNVIS84goFJZys5koADcv7G/5uPuVEVGMOt8Wh0t75qca:wzi8e/yMtAsuVEVTW+hG","tlshash":"f5c3e6d9b5c2f0b243a72079507f210af23a5e65a84d9450f223e8d57c3d98e9237e7e","first_seen":"2025-02-18T12:00:38.395286Z","last_seen":"2025-02-18T12:00:38.395286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":3,"dns":3,"connect":1,"send":0,"wait":25,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brandpad.io/bugs/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.773Z","timestamp":1739880011773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brandpad.io","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jan 2025 23:11:00 GMT","end":"Sat, 19 Apr 2025 23:10:59 GMT"},"fingerprint":{"sha1":"4F:B1:61:B6:21:56:4A:B4:11:57:1B:DA:30:E3:56:41:02:84:77:CE","sha256":"89:1F:F6:E7:C9:F2:05:9E:88:A5:D5:5E:5F:A9:AF:D1:28:61:2C:9D:EC:D0:D4:89:EC:9F:1E:B9:E9:AD:16:8F"}}},"request":{"raw":"POST /bugs/ HTTP/1.1\r\nHost: brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brandpad.io/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 516\r\nOrigin: https://brandpad.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sg.IS2rmaWt1BJa5nKVp7kGcgsCwQg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Feb 2025 12:00:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\naccess-control-expose-headers: X-CSRFToken\r\nx-csrftoken: ImY2OGU3ZDE3MjUzMjg2MDVkYWFhYzgyNzEzYWEwZGVhNTU2NDE0YTci.Z7R2Sw.ycqkl-zRfIJGvrRZOHQTa3lQRek\r\nvary: Cookie\r\nset-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sw.DmNDuPFiFtBjbIClVsGSk3-xA7Q; Domain=brandpad.io; Expires=Thu, 20 Mar 2025 12:00:11 GMT; Secure; HttpOnly; Path=/; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-05T22:03:23.919494Z","times_seen":317037,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"brandpad.io/bugs/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.773Z","timestamp":1739880011773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brandpad.io","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jan 2025 23:11:00 GMT","end":"Sat, 19 Apr 2025 23:10:59 GMT"},"fingerprint":{"sha1":"4F:B1:61:B6:21:56:4A:B4:11:57:1B:DA:30:E3:56:41:02:84:77:CE","sha256":"89:1F:F6:E7:C9:F2:05:9E:88:A5:D5:5E:5F:A9:AF:D1:28:61:2C:9D:EC:D0:D4:89:EC:9F:1E:B9:E9:AD:16:8F"}}},"request":{"raw":"POST /bugs/ HTTP/1.1\r\nHost: brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brandpad.io/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1063\r\nOrigin: https://brandpad.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sw.DmNDuPFiFtBjbIClVsGSk3-xA7Q\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Feb 2025 12:00:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\naccess-control-expose-headers: X-CSRFToken\r\nx-csrftoken: ImY2OGU3ZDE3MjUzMjg2MDVkYWFhYzgyNzEzYWEwZGVhNTU2NDE0YTci.Z7R2TA.82CzODBX_doRbL-sSiFPaKbTZ5o\r\nvary: Cookie\r\nset-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; Domain=brandpad.io; Expires=Thu, 20 Mar 2025 12:00:12 GMT; Secure; HttpOnly; Path=/; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-05T22:03:23.919494Z","times_seen":317037,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"brandpad.io/bugs/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.773Z","timestamp":1739880011773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brandpad.io","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jan 2025 23:11:00 GMT","end":"Sat, 19 Apr 2025 23:10:59 GMT"},"fingerprint":{"sha1":"4F:B1:61:B6:21:56:4A:B4:11:57:1B:DA:30:E3:56:41:02:84:77:CE","sha256":"89:1F:F6:E7:C9:F2:05:9E:88:A5:D5:5E:5F:A9:AF:D1:28:61:2C:9D:EC:D0:D4:89:EC:9F:1E:B9:E9:AD:16:8F"}}},"request":{"raw":"POST /bugs/ HTTP/1.1\r\nHost: brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brandpad.io/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 517\r\nOrigin: https://brandpad.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sw.DmNDuPFiFtBjbIClVsGSk3-xA7Q\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Feb 2025 12:00:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\naccess-control-expose-headers: X-CSRFToken\r\nx-csrftoken: ImY2OGU3ZDE3MjUzMjg2MDVkYWFhYzgyNzEzYWEwZGVhNTU2NDE0YTci.Z7R2TA.82CzODBX_doRbL-sSiFPaKbTZ5o\r\nvary: Cookie\r\nset-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; Domain=brandpad.io; Expires=Thu, 20 Mar 2025 12:00:12 GMT; Secure; HttpOnly; Path=/; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-05T22:03:23.919494Z","times_seen":317037,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"brandpad.io/bugs/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.773Z","timestamp":1739880011773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brandpad.io","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jan 2025 23:11:00 GMT","end":"Sat, 19 Apr 2025 23:10:59 GMT"},"fingerprint":{"sha1":"4F:B1:61:B6:21:56:4A:B4:11:57:1B:DA:30:E3:56:41:02:84:77:CE","sha256":"89:1F:F6:E7:C9:F2:05:9E:88:A5:D5:5E:5F:A9:AF:D1:28:61:2C:9D:EC:D0:D4:89:EC:9F:1E:B9:E9:AD:16:8F"}}},"request":{"raw":"POST /bugs/ HTTP/1.1\r\nHost: brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brandpad.io/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 517\r\nOrigin: https://brandpad.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sw.DmNDuPFiFtBjbIClVsGSk3-xA7Q\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Feb 2025 12:00:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\naccess-control-expose-headers: X-CSRFToken\r\nx-csrftoken: ImY2OGU3ZDE3MjUzMjg2MDVkYWFhYzgyNzEzYWEwZGVhNTU2NDE0YTci.Z7R2TA.82CzODBX_doRbL-sSiFPaKbTZ5o\r\nvary: Cookie\r\nset-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; Domain=brandpad.io; Expires=Thu, 20 Mar 2025 12:00:12 GMT; Secure; HttpOnly; Path=/; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-05T22:03:23.919494Z","times_seen":317037,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scripts.simpleanalyticscdn.com/latest.js","fqdn":"scripts.simpleanalyticscdn.com","domain":"simpleanalyticscdn.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.567Z","timestamp":1739880011567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scripts.simpleanalyticscdn.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Feb 2025 19:10:01 GMT","end":"Fri, 09 May 2025 19:10:00 GMT"},"fingerprint":{"sha1":"79:9B:29:EB:12:2E:36:8A:79:B9:5A:8A:4C:8E:62:C9:9B:AC:83:E6","sha256":"CB:90:55:51:B5:54:A3:39:61:01:1E:37:A1:12:F8:AD:B7:BB:D9:90:57:91:76:72:B7:5A:75:13:E2:0B:3E:31"}}},"request":{"raw":"GET /latest.js HTTP/1.1\r\nHost: scripts.simpleanalyticscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:11 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 103822\r\ncdn-uid: 621ef7c8-45de-46e4-8237-2eca0c3a2d75\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=604800\r\ncontent-encoding: br\r\netag: \"64ab8017-1d5b\"\r\nlast-modified: Mon, 10 Jul 2023 03:50:47 GMT\r\ncdn-storageserver: DE-382\r\ncdn-fileserver: 635\r\ncdn-proxyver: 1.06\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/17/2024 11:22:38\r\ncdn-edgestorageid: 830\r\nsimple-analytics: true\r\ncdn-requestid: 83b50271e1ff47cf1b1228b5851133ec\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3854,"size_decoded":7515,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7370)","md5":"aa6014215f23cb3f6cb4902be02d081a","sha1":"44ba2453c2e980ba84602006b4b912736cfd913c","sha256":"a965bdafdcbdf6a1bc0a04fb81ee6d5fb86e1fde7a2da4e8998ab3bcf467bdb4","sha512":"483e8e0a4575808ab0c1262718d85a0b2b9d8bd76d7808ed19050cff3c13690191fe6afb1c9e93576fb153630b413aeffe9fd56bb169d66f97d7fcea1c311917","ssdeep":"96:afayldLqaMRuO24q4cVWQ4BPdTJJ6/j4YE9KQeL6lRS+LwNYzCZu2vQmaDN:abctc45PPQj4YE9uWA+Y1Zu2vQmaZ","tlshash":"4df10adcb2a1707397d3307281afd20ea33b779b398bc4555d1899d4ac7494a4027f2c","first_seen":"2023-05-06T11:43:24Z","last_seen":"2026-06-05T17:43:12.986902Z","times_seen":1884,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":82,"dns":57,"connect":1,"send":0,"wait":2,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scripts.simpleanalyticscdn.com/auto-events.js","fqdn":"scripts.simpleanalyticscdn.com","domain":"simpleanalyticscdn.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.570Z","timestamp":1739880011570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scripts.simpleanalyticscdn.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Feb 2025 19:10:01 GMT","end":"Fri, 09 May 2025 19:10:00 GMT"},"fingerprint":{"sha1":"79:9B:29:EB:12:2E:36:8A:79:B9:5A:8A:4C:8E:62:C9:9B:AC:83:E6","sha256":"CB:90:55:51:B5:54:A3:39:61:01:1E:37:A1:12:F8:AD:B7:BB:D9:90:57:91:76:72:B7:5A:75:13:E2:0B:3E:31"}}},"request":{"raw":"GET /auto-events.js HTTP/1.1\r\nHost: scripts.simpleanalyticscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:11 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 103822\r\ncdn-uid: 621ef7c8-45de-46e4-8237-2eca0c3a2d75\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=10800\r\ncontent-encoding: br\r\netag: \"645288d9-acd\"\r\nlast-modified: Wed, 03 May 2023 16:16:25 GMT\r\ncdn-storageserver: DE-599\r\ncdn-fileserver: 252\r\ncdn-proxyver: 1.06\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/19/2024 17:18:51\r\ncdn-edgestorageid: 830\r\nsimple-analytics: true\r\ncdn-requestid: 964613b53b0b5ed4f9f5c9b9f6730238\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1359,"size_decoded":2765,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2615)","md5":"617d85db1b8d137614c3c3b2f92081a4","sha1":"ec82a0324e3fa5f1d60ccd922590bd1252a49b5d","sha256":"9b0af42637fc5ddf78c5a53922baa0e1588f3754975b9a18d9e487a5c3962ef4","sha512":"052750bec82b62de4ed9225b9f94da16a083fdaa134704f23e876eb4752987754a46f7343a02903e05044fc00e328dfb4902b44fa93a7f3fceb8f78262019a98","ssdeep":"","tlshash":"ae51c8fe630465b7193ac8aa9c8e7615947b62e17407cc80e569dc8ba43cd8640fdd8f","first_seen":"2023-08-06T14:04:03Z","last_seen":"2026-06-02T19:25:25.250269Z","times_seen":158,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":83,"dns":58,"connect":1,"send":0,"wait":2,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"depot.brandpad.io/images/favicon-16x16.png","fqdn":"depot.brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"54.240.174.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:12.219Z","timestamp":1739880012219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"depot.brandpad.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 03 Jan 2025 00:00:00 GMT","end":"Sun, 01 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"59:FD:4D:36:80:8E:07:5C:FF:4D:A3:D0:D6:83:14:05:60:47:F1:48","sha256":"E2:75:29:35:62:1F:82:24:DD:E7:5C:7E:69:6E:73:11:E5:B1:BF:ED:13:DB:07:E9:C3:6F:0D:D3:AF:F8:D8:74"}}},"request":{"raw":"GET /images/favicon-16x16.png HTTP/1.1\r\nHost: depot.brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; _hp2_ses_props.3922783258=%7B%22ts%22%3A1739880011782%2C%22d%22%3A%22brandpad.io%22%2C%22h%22%3A%22%2Flamb-building%2F%22%7D; _hp2_id.3922783258=%7B%22userId%22%3A%228562232276747338%22%2C%22pageviewId%22%3A%225109077064164684%22%2C%22sessionId%22%3A%222705402496382861%22%2C%22identity%22%3Anull%2C%22trackerVersion%22%3A%224.0%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 493\r\ndate: Tue, 18 Feb 2025 08:16:58 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Mon, 16 Jan 2023 12:24:24 GMT\r\netag: \"435a1f0028fb75979b82ebb8c9ec1e81\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xU7yTQyb5C16oa_oxI7jQcEHwWUmGUOdYu3mvIbBpBxyAwrCFNTr_Q==\r\nage: 13395\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":493,"size_decoded":493,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"435a1f0028fb75979b82ebb8c9ec1e81","sha1":"c2ab4c2b468669310e81fd05b6aa7574a1a1a11f","sha256":"0ca42ec376830fca6ac633bee3b78e63fd478b2c2443f6adbd0aac553c68bf8b","sha512":"f8de6e6706d1c975893e57b69fba86406bc745548e8217963afbb1ecff2c3e883cbe90e139ae99ced26bb7be7955a83ab5fad9b4cab24b1d3ef6df0032ce8295","ssdeep":"","tlshash":"88f0abcba62a8f21d9df2b372bd21184a53ca41f0240160ffb2ac02618b5a845991e46","first_seen":"2025-02-18T12:00:38.398158Z","last_seen":"2025-02-19T08:11:04.978861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":1,"dns":5,"connect":1,"send":0,"wait":4,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"depot.brandpad.io/images/apple-touch-icon.png","fqdn":"depot.brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"54.240.174.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:12.218Z","timestamp":1739880012218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"depot.brandpad.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 03 Jan 2025 00:00:00 GMT","end":"Sun, 01 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"59:FD:4D:36:80:8E:07:5C:FF:4D:A3:D0:D6:83:14:05:60:47:F1:48","sha256":"E2:75:29:35:62:1F:82:24:DD:E7:5C:7E:69:6E:73:11:E5:B1:BF:ED:13:DB:07:E9:C3:6F:0D:D3:AF:F8:D8:74"}}},"request":{"raw":"GET /images/apple-touch-icon.png HTTP/1.1\r\nHost: depot.brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; _hp2_ses_props.3922783258=%7B%22ts%22%3A1739880011782%2C%22d%22%3A%22brandpad.io%22%2C%22h%22%3A%22%2Flamb-building%2F%22%7D; _hp2_id.3922783258=%7B%22userId%22%3A%228562232276747338%22%2C%22pageviewId%22%3A%225109077064164684%22%2C%22sessionId%22%3A%222705402496382861%22%2C%22identity%22%3Anull%2C%22trackerVersion%22%3A%224.0%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2393\r\ndate: Tue, 18 Feb 2025 09:33:45 GMT\r\nlast-modified: Mon, 16 Jan 2023 12:21:06 GMT\r\netag: \"8187249ab8d097fab2ea1728ac366582\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: kN9eR9JKWkkLHDhR6ThaB9hPItdNYKxM0eq8zJFcxqJXuzaQ-YHjbA==\r\nage: 8788\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2393,"size_decoded":2393,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"8187249ab8d097fab2ea1728ac366582","sha1":"18a39cc9ac1d28f32ca116dadebdb984a3618a91","sha256":"d0503436ef74370ef92b0e158b512baed090c5d071fbd87824872e9e0893fdd1","sha512":"37aa1b8bada458c17997f68419fb9f159f24be68056ae21b7c127f56bf3775ec8bcca6bd3629d2a6cd71e7701fe3e2e1eff453f87e3bf7891071211330ce4a7d","ssdeep":"","tlshash":"99413aade214b9b2cc5e1d3749d442ca82dee21c34c048ddfb2bc3977cbf16402a1a10","first_seen":"2025-02-18T12:00:38.399187Z","last_seen":"2025-02-19T08:11:04.978195Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":2,"dns":5,"connect":1,"send":0,"wait":3,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2yyd1h5u9mauk.cloudfront.net/integrations/web/v1/library/zw1HLQQVqfChjTJO/delighted.js","fqdn":"d2yyd1h5u9mauk.cloudfront.net","domain":"d2yyd1h5u9mauk.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:12.214Z","timestamp":1739880012214,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Thu, 03 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62","sha256":"41:BA:3A:6D:EE:23:CF:F9:B5:B7:FA:8C:6F:F5:D9:E5:89:D2:DD:DA:17:35:5C:E8:15:8F:DA:8E:2A:C8:5C:5E"}}},"request":{"raw":"GET /integrations/web/v1/library/zw1HLQQVqfChjTJO/delighted.js HTTP/1.1\r\nHost: d2yyd1h5u9mauk.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Tue, 18 Feb 2025 12:00:12 GMT\r\nStatus: 200 OK\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-UA-Compatible: IE=Edge,chrome=1\r\nCache-Control: max-age=120, public\r\nContent-Security-Policy: default-src 'self'; font-src 'self' data: https://fonts.gstatic.com http://*.auryc.com https://dcx14qs33eg2z.cloudfront.net; style-src 'self' 'unsafe-inline' https://accounts.google.com https://cdn.weglot.com https://fonts.googleapis.com https://tagmanager.google.com https://heapanalytics.com https://app-sj30.marketo.com https://cdn.zapier.com https://surveys-web.delighted.com https://dcx14qs33eg2z.cloudfront.net; object-src 'none'; media-src 'self' https://beacon-v2.helpscout.net https://dcx14qs33eg2z.cloudfront.net; img-src 'self' data: http: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://app.pendo.io https://app-sj30.marketo.com https://beacon-v2.helpscout.net https://cdn.heapanalytics.com https://cdn.pendo.io https://cdn.weglot.com https://data.pendo.io https://googleads.g.doubleclick.net https://heapanalytics.com https://js.pusher.com https://js.stripe.com https://munchkin.marketo.net https://pendo-io-static.storage.googleapis.com https://pendo-static-5802606298267648.storage.googleapis.com https://rum-static.pingdom.net https://ssl.google-analytics.com https://tagmanager.google.com https://unpkg.com/web-vitals@4/dist/web-vitals.attribution.iife.js https://tpc.googlesyndication.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://zapier.com https://cdn.zapier.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://public.profitwell.com https://d3dy5gmtp8yhk7.cloudfront.net/ https://d2yyd1h5u9mauk.cloudfront.net https://surveys-web.delighted.com https://dcx14qs33eg2z.cloudfront.net; frame-src 'self' https://accounts.google.com https://app.pendo.io https://js.stripe.com https://beacon-v2.helpscout.net https://bid.g.doubleclick.net https://td.doubleclick.net https://tpc.googlesyndication.com https://app-sj30.marketo.com https://www.googletagmanager.com; connect-src 'self' https://delighted.com https://*.delighted.com https://api.delighted.com https://surveys-web.delighted.com https://accounts.google.com https://api.zapier.com https://zapier.com https://app.pendo.io https://beaconapi.helpscout.net https://chatapi.helpscout.net https://api.weglot.com https://cdn.weglot.com https://cdn-api-weglot.com https://d3hb14vkzrxvla.cloudfront.net https://data.pendo.io https://heapanalytics.com https://pendo-static-5802606298267648.storage.googleapis.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://www2.profitwell.com https://099-SJL-057.mktorest.com https://*.pusher.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://*.auryc.com wss://ws.pusher.com wss://ws.pusherapp.com https://dcx14qs33eg2z.cloudfront.net; report-uri https://fb4qdnkh2k.execute-api.us-east-1.amazonaws.com/default\r\nX-Request-Id: 404197eaba77e0b3c62dba56b1e75fdd\r\nX-Runtime: 0.009751\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P1\r\nX-Amz-Cf-Id: khrw4wO86Xs7pTmPe_ZdlhPSWKffc7p3Lk522PMhVl4fepReuhNmTA==\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114,"size_decoded":159,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"ec780e7febfa607109c27aba308248a4","sha1":"303ca6a286592c53f89d3cbd74dfbebfc1267760","sha256":"bffc53a34a16569907097bdba6121f043e9a2bdc205aae412e23666b0e47ce71","sha512":"7cb2c1b19e837b64dc2c8838f4e8c0fbe3480389f5ec542a2e61db113bb69e07f787ab1fecc942a3b84a71f055243f69447980514d3b009efc20d4e9a95c6144","ssdeep":"","tlshash":"62c02b222fa4192122565c7e0d07c00fb1e0dc004d1af41c380c0d4c3fc0cf744232d6","first_seen":"2023-03-14T19:53:56Z","last_seen":"2026-05-26T09:02:03.768532Z","times_seen":39,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":37,"dns":49,"connect":1,"send":0,"wait":129,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:12.213Z","timestamp":1739880012213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jan 2025 08:35:27 GMT","end":"Mon, 21 Apr 2025 08:35:26 GMT"},"fingerprint":{"sha1":"05:97:87:A1:AD:4E:AE:90:A2:F7:46:4F:36:5E:72:B3:16:8F:5A:DF","sha256":"11:0A:2C:A9:BD:C4:F6:BD:23:94:C3:78:2F:72:C9:3D:A1:7A:C2:81:79:CE:AA:7B:5F:F3:55:DB:91:82:C7:2C"}}},"request":{"raw":"GET /iframe_api HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\nexpires: Tue, 18 Feb 2025 12:00:12 GMT\r\ndate: Tue, 18 Feb 2025 12:00:12 GMT\r\ncache-control: private, max-age=0\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncontent-security-policy: require-trusted-types-for 'script'\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: YSC=9Fo0AK23cGE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_INFO1_LIVE=4fDA26X_ifo; Domain=.youtube.com; Expires=Sun, 17-Aug-2025 12:00:12 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIcEhgSFhMLFBUWFwwYGRobHB0eHw4PIBAREiEgEQ%3D%3D; Domain=.youtube.com; Expires=Sun, 17-Aug-2025 12:00:12 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=COq6oNOx-oCF4gEQy9_XkJbNiwMYy9_XkJbNiwM%3D; Domain=youtube.com; Expires=Sun, 17-Aug-2025 12:00:12 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":960,"size_decoded":993,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"729a012c1a52b6503d9cf586a580b958","sha1":"0fd30580bbfc8f45e10ccbdfdc2974b838bd03a5","sha256":"90b7fd1ac9d9948c1d1445501f94dc854ee4b93fa9cbedc4247452921bfe2bb8","sha512":"d427ec10279820762876d45fdd6b19f925dd133284c3a05551915828c08feb1bde005fa2db40fb342e1075508541ee71de33e2d28dc24823a803f956b1b06b76","ssdeep":"","tlshash":"5611ed7b3d80e639869894e4a03fc31cf1b22495bc50ce9110cee899e65cacadd2d5fc","first_seen":"2025-02-13T18:23:07.733588Z","last_seen":"2025-02-19T16:04:11.743154Z","times_seen":129,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":89,"dns":3,"connect":8,"send":0,"wait":26,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brandpad.io/bugs/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.773Z","timestamp":1739880011773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brandpad.io","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jan 2025 23:11:00 GMT","end":"Sat, 19 Apr 2025 23:10:59 GMT"},"fingerprint":{"sha1":"4F:B1:61:B6:21:56:4A:B4:11:57:1B:DA:30:E3:56:41:02:84:77:CE","sha256":"89:1F:F6:E7:C9:F2:05:9E:88:A5:D5:5E:5F:A9:AF:D1:28:61:2C:9D:EC:D0:D4:89:EC:9F:1E:B9:E9:AD:16:8F"}}},"request":{"raw":"POST /bugs/ HTTP/1.1\r\nHost: brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brandpad.io/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2095\r\nOrigin: https://brandpad.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; _hp2_ses_props.3922783258=%7B%22ts%22%3A1739880011782%2C%22d%22%3A%22brandpad.io%22%2C%22h%22%3A%22%2Flamb-building%2F%22%7D; _hp2_id.3922783258=%7B%22userId%22%3A%228562232276747338%22%2C%22pageviewId%22%3A%225109077064164684%22%2C%22sessionId%22%3A%222705402496382861%22%2C%22identity%22%3Anull%2C%22trackerVersion%22%3A%224.0%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Feb 2025 12:00:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\naccess-control-expose-headers: X-CSRFToken\r\nx-csrftoken: ImY2OGU3ZDE3MjUzMjg2MDVkYWFhYzgyNzEzYWEwZGVhNTU2NDE0YTci.Z7R2TA.82CzODBX_doRbL-sSiFPaKbTZ5o\r\nvary: Cookie\r\nset-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; Domain=brandpad.io; Expires=Thu, 20 Mar 2025 12:00:12 GMT; Secure; HttpOnly; Path=/; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-05T22:03:23.919494Z","times_seen":317037,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"brandpad.io/bugs/","fqdn":"brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"3.71.212.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.773Z","timestamp":1739880011773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brandpad.io","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jan 2025 23:11:00 GMT","end":"Sat, 19 Apr 2025 23:10:59 GMT"},"fingerprint":{"sha1":"4F:B1:61:B6:21:56:4A:B4:11:57:1B:DA:30:E3:56:41:02:84:77:CE","sha256":"89:1F:F6:E7:C9:F2:05:9E:88:A5:D5:5E:5F:A9:AF:D1:28:61:2C:9D:EC:D0:D4:89:EC:9F:1E:B9:E9:AD:16:8F"}}},"request":{"raw":"POST /bugs/ HTTP/1.1\r\nHost: brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brandpad.io/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 517\r\nOrigin: https://brandpad.io\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; _hp2_ses_props.3922783258=%7B%22ts%22%3A1739880011782%2C%22d%22%3A%22brandpad.io%22%2C%22h%22%3A%22%2Flamb-building%2F%22%7D; _hp2_id.3922783258=%7B%22userId%22%3A%228562232276747338%22%2C%22pageviewId%22%3A%225109077064164684%22%2C%22sessionId%22%3A%222705402496382861%22%2C%22identity%22%3Anull%2C%22trackerVersion%22%3A%224.0%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Feb 2025 12:00:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\naccess-control-expose-headers: X-CSRFToken\r\nx-csrftoken: ImY2OGU3ZDE3MjUzMjg2MDVkYWFhYzgyNzEzYWEwZGVhNTU2NDE0YTci.Z7R2TA.82CzODBX_doRbL-sSiFPaKbTZ5o\r\nvary: Cookie\r\nset-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2TA.IWdzoTsI-VZ5ljcPwkDjR42MH4U; Domain=brandpad.io; Expires=Thu, 20 Mar 2025 12:00:12 GMT; Secure; HttpOnly; Path=/; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-05T22:03:23.919494Z","times_seen":317037,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/e7567ecf/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:12.680Z","timestamp":1739880012680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jan 2025 08:35:27 GMT","end":"Mon, 21 Apr 2025 08:35:26 GMT"},"fingerprint":{"sha1":"05:97:87:A1:AD:4E:AE:90:A2:F7:46:4F:36:5E:72:B3:16:8F:5A:DF","sha256":"11:0A:2C:A9:BD:C4:F6:BD:23:94:C3:78:2F:72:C9:3D:A1:7A:C2:81:79:CE:AA:7B:5F:F3:55:DB:91:82:C7:2C"}}},"request":{"raw":"GET /s/player/e7567ecf/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 10303\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 14 Feb 2025 12:02:46 GMT\r\nexpires: Sat, 14 Feb 2026 12:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 12 Feb 2025 05:25:08 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 345446\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10303,"size_decoded":31334,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"85ccdeaf4aeb05d35d040f8461fc1524","sha1":"776fe7860dd6f3301bb58ba53fa21b308f86e9a4","sha256":"e7e038a97c859394664a2b65bfed05a1571fab38ed1b730b9ff35b222d78f096","sha512":"d237a7bd93542dfef2718f1b81af4d2d7d8c7d1e2c20e5ec64657a61fe7f4c9b011bce412f902ef5278429e32e84dfb063f921b4e4a7a71135eb108831d285ef","ssdeep":"384:9UiDgUXh0Lc0m+g1Rc4OawaBpbDN34tZ4FL4/hwG3OCKIvzupB7K+BDbNXnH/fnV:9bg0gNeRNl4JwGDKIMDlHF19","tlshash":"25e2c6ccbbb1b475037365f5502f100fb23ea8aaa40c8999f188d4e06cb59ad4667f7d","first_seen":"2025-02-03T14:27:55.900364Z","last_seen":"2026-03-31T20:25:40.645518Z","times_seen":1292,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:20.769693949Z","timestamp":1739880020769,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 284978\r\nexpires: Sun, 08 Feb 2026 12:00:20 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=n%2B2e%2BCCcdmmHtjPf2BaTs90PwGJQ2%2FTuPQ49Q40f%2FwSzwIju9Cku0njDWrcWarX4DqZOs%2BJ6L5luIoDiTduLQIuNvf7UITxdVk5RqdViEEPqaJgi14%2BYrcY3AeEzYbMJqcqi2Dgh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 913ddb31aed8b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13972,"size_decoded":48316,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-06-05T21:42:41.208526Z","times_seen":152573,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:20.776030747Z","timestamp":1739880020776,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 18 Feb 2025 12:00:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/0e3e6804b971/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 913ddb31cc9256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-05T22:09:33.277864Z","times_seen":16156336,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"imcd.godendome.ru/Nh71AZeH/","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:20.889654497Z","timestamp":1739880020889,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /Nh71AZeH/ HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nSec-Fetch-User: ?1\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EqHMw47i9NMWTcohDDlmz5gyz6CCpu7CwSXGtQsVdLyscww0d9WRjp%2FISFuXmOcXKIIIFmFt7Jy2WjNJYoW5l06bvw3sUrd%2F4roV1rP%2FNH8%2BtYkA21XDqGSWXtMy4Kyll3wZ9g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InM3d1pGNks2bHc3N3E0YjhCTnRlZXc9PSIsInZhbHVlIjoiWXNnOEZtdHYrN1dUWlQwUnRuNDBWa1BoZnJ5RlduRnU4RktuZ3hodm80alJhTWVBN3RaNHBvQUxtQzdnYWVURlZXRVlNTWo1MGRDSVNFTVJoS1lBZGxwNWRiRnFQYy9rYk9kcHVYUTVJb01XeCtObC9LUmR5bkpoTVVhWnB1UHMiLCJtYWMiOiIyYmFiNmE2ZDIwZDUyZDE0NzYyNjc0MDRmOTE4NTUzMTYzNjQzZTUzMzViMDRmMmNiOTA5N2E0ZjRiYjE1YzBmIiwidGFnIjoiIn0%3D; expires=Tue, 18-Feb-2025 14:00:20 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjdPTEkrN1VlVU5tUWEwZGdRYlVDZmc9PSIsInZhbHVlIjoiK2NuME13NWtOVzJ0Y2MwTUZ1Wk1adjllMTZKV3NlQnBsTDhWVGd6ajMxRUJxOGlXd1U0SGErOWhYR0U2c3EvTkdiSnJwYWxBUVk3bG5TVzJkdFc3aXNDa1N3bGEyMkpMYTJWcHdHSzZibm9RazlqNjdORzNxbnlOb1o1QmFQdzciLCJtYWMiOiI1MWYxYjg4MDg0Y2M1YTgyZjcyYWI5ZmNmODg5OWFiZWM5N2RiZjM2M2RlNTJlOWJmMTQ0M2IyNTQ4YmM5ODI4IiwidGFnIjoiIn0%3D; expires=Tue, 18-Feb-2025 14:00:20 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nserver: cloudflare\r\ncf-ray: 913ddb2f6e1c56be-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1140\u0026min_rtt=1133\u0026rtt_var=328\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=1411\u0026delivery_rate=2479452\u0026cwnd=245\u0026unsent_bytes=0\u0026cid=7f5c88f3e5fb6a47\u0026ts=127\u0026x=0\", cfL4;desc=\"?proto=TCP\u0026rtt=561\u0026min_rtt=442\u0026rtt_var=201\u0026sent=8\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3200\u0026recv_bytes=1143\u0026delivery_rate=7133004\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=147117b064a9d00d\u0026ts=227\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60765,"size_decoded":485654,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65250)","md5":"0fa48cee3332b80d83d3ea7ae06d4d0e","sha1":"494c89ee2aa515b8a5522745078a2043a11ae8db","sha256":"16aeb6d9f1ae5bc5b2c1e07937a928a99c05ecdc9f498d6f45abe5ba8099d10d","sha512":"8dc7670db2d406573a08c7f68f6628e24b08865b24079a86b834e02e7413e1c3f1c750a926435f4d4171efe32dca3422b07aecece5598ef6e2fc00f486b60ed4","ssdeep":"1536:xVgymjJdNiQ9drpXX7W2VgymjJdNiQ9drpXX7WGLBIwLBIaC:MtjpjWtjpjvdU","tlshash":"2fa4677e771719b2d6d86db3d0b529079034e1aa28c14ef9a7aa48bde357e480ccc1dc","first_seen":"2025-02-18T12:00:38.40407Z","last_seen":"2025-02-18T12:00:38.40407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"http","addr":"developers.cloudflare.com/favicon.png","fqdn":"developers.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.16.2.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:20.973012331Z","timestamp":1739880020973,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: developers.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 937\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6be7ff94b6151f8cfbf08b53a17e2ac1\"\r\nset-cookie: __cf_bm=Fzzjy9znweTLCm5VgA6yjT7KM1.UCdTuA.SSann0nE8-1739880020-1.0.1.1-So8ws6D.187yq1LN7ydzhRIz3g1M9Ow9fVCOvgGDqC5fapeD5YGH5mM43pu6Gt75yKykYeiEz2ayPkqyqMwe0Q; path=/; expires=Tue, 18-Feb-25 12:30:20 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 913ddb32c838b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":937,"size_decoded":937,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"fc3b7bbe7970f47579127561139060e2","sha1":"3f7c5783fe1f4404cb16304a5a274778ea3abd25","sha256":"85e6223afdbd5badf2c79bcfbaa6fe686acaa781eca52c196647ffabb3be2ffe","sha512":"49fa22de92bebede28bb72f7c7902c01d59e56723811629e40c8a887e34fd0b392a9df169a238bdd8e46d984e76312d75b2644b8611c66a71a559c1b6834de6c","ssdeep":"","tlshash":"2d11b7a7452d00b1d69933639306d88aa21ee848d74308ca38adf38713834d69bc976e","first_seen":"2024-11-14T16:12:41.503532Z","last_seen":"2026-05-28T00:21:10.676493Z","times_seen":18186,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heapanalytics.com/h?a=3922783258\u0026u=8562232276747338\u0026v=5109077064164684\u0026s=2705402496382861\u0026b=web\u0026tv=4.0\u0026sp=ts\u0026sp=1739880011782\u0026sp=d\u0026sp=brandpad.io\u0026sp=h\u0026sp=%2Flamb-building%2F\u0026pp=d\u0026pp=brandpad.io\u0026pp=h\u0026pp=%2Flamb-building%2F\u0026pp=t\u0026pp=Lamb%20Building%20-%20brand%20identity%2C%20guideline%20and%20assets.\u0026pp=ts\u0026pp=1739880011782\u0026id0=1510378244725147\u0026t0=click\u0026n0=a\u0026c0=canvas-link\u0026h0=https%3A%2F%2Fimcd.godendome.ru%2FNh71AZeH%2F\u0026y0=%40main%3B.bp-guide%3B%7C%40section%3B%23section-ix-1%3B.1%3B.bp-grid%3B.canvas-link-underline%3B%7C%40div%3B.bp-column%3B.bp-width-48%3B%7C%40div%3B.bp-block%3B%7C%40div%3B.bp-content%3B.start-left%3B%7C%40h1%3B.center%3B.h1%3B.text%3B%7C%40a%3B.canvas-link%3B%5Bhref%3Dhttps%3A%2F%2Fimcd.godendome.ru%2FNh71AZeH%2F%5D%3B%5Btarget%3D_blank%5D%3B%7C\u0026ts0=1739880020277\u0026x0=REVIEW%20YOUR%20DOCUMENT%20HERE\u0026sch0=1024\u0026scw0=1280\u0026st=1739880022605\u0026lv=4.23.5\u0026ld=cdn.heapanalytics.com","fqdn":"heapanalytics.com","domain":"heapanalytics.com","tld":"com"},"ip":{"addr":"3.224.245.224","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:22.610Z","timestamp":1739880022610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heapanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 18 Nov 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"23:D0:B6:D9:57:EF:54:C0:7E:B2:6C:06:02:43:65:E3:AE:BF:9C:96","sha256":"FA:E5:C6:3F:CB:AB:95:C2:8F:1C:FA:74:7D:0A:3A:9E:84:B0:C4:0F:B7:F2:54:D3:2A:50:B4:DB:B1:78:67:C4"}}},"request":{"raw":"GET /h?a=3922783258\u0026u=8562232276747338\u0026v=5109077064164684\u0026s=2705402496382861\u0026b=web\u0026tv=4.0\u0026sp=ts\u0026sp=1739880011782\u0026sp=d\u0026sp=brandpad.io\u0026sp=h\u0026sp=%2Flamb-building%2F\u0026pp=d\u0026pp=brandpad.io\u0026pp=h\u0026pp=%2Flamb-building%2F\u0026pp=t\u0026pp=Lamb%20Building%20-%20brand%20identity%2C%20guideline%20and%20assets.\u0026pp=ts\u0026pp=1739880011782\u0026id0=1510378244725147\u0026t0=click\u0026n0=a\u0026c0=canvas-link\u0026h0=https%3A%2F%2Fimcd.godendome.ru%2FNh71AZeH%2F\u0026y0=%40main%3B.bp-guide%3B%7C%40section%3B%23section-ix-1%3B.1%3B.bp-grid%3B.canvas-link-underline%3B%7C%40div%3B.bp-column%3B.bp-width-48%3B%7C%40div%3B.bp-block%3B%7C%40div%3B.bp-content%3B.start-left%3B%7C%40h1%3B.center%3B.h1%3B.text%3B%7C%40a%3B.canvas-link%3B%5Bhref%3Dhttps%3A%2F%2Fimcd.godendome.ru%2FNh71AZeH%2F%5D%3B%5Btarget%3D_blank%5D%3B%7C\u0026ts0=1739880020277\u0026x0=REVIEW%20YOUR%20DOCUMENT%20HERE\u0026sch0=1024\u0026scw0=1280\u0026st=1739880022605\u0026lv=4.23.5\u0026ld=cdn.heapanalytics.com HTTP/1.1\r\nHost: heapanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 37\r\nserver: nginx\r\ncache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\npragma: no-cache\r\netag: W/\"25-4iFqfptz9csCeTUceM5hwzR1zqc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: POST, PUT, GET\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37,"size_decoded":37,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"3eacd0132310ea44cad756b378a3bc07","sha1":"e2216a7e9b73f5cb0279351c78ce61c33475cea7","sha256":"bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96","sha512":"bd9ab35dde3a5242b04c159187732e13b0a6da50ddcff7015dfb78cdd68743e191eaf5cddedd49bef7d2d5a642c217272a40e5ba603fe24ca676a53f8c417c5d","ssdeep":"","tlshash":"76800003caa00003e2aae0320a0803002380a23002ac030e80aca0acecaa0a20c00000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-06-05T22:05:29.249767Z","times_seen":30594,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"imcd.godendome.ru/GDSherpa-bold.woff2","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.498015468Z","timestamp":1739880026498,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /GDSherpa-bold.woff2 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28000\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"GDSherpa-bold.woff2\"\r\ncache-control: max-age=14400\r\nage: 2527\r\nlast-modified: Tue, 18 Feb 2025 11:01:14 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BQ1vQ%2F8y1XR1BotujlEqN8tBDxxxdXjX7OmOYmi0tc%2BEhSMYpN%2Fei9l8GlyYqerUFyZqa2%2FDWoTXXviLHQEb6VVENXGc45kJgni2VieUSJuEp8NtX%2FYBu5%2FPpj6BMdzegkgBRQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1204\u0026min_rtt=1190\u0026rtt_var=361\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=2178\u0026delivery_rate=2287519\u0026cwnd=246\u0026unsent_bytes=0\u0026cid=f43baf263bce8bf9\u0026ts=24\u0026x=0\"\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-ray: 913ddb558836b509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28000,"size_decoded":28000,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28000, version 1.66","md5":"a4bca6c95fed0d0c5cc46cf07710dcec","sha1":"73b56e33b82b42921db8702a33efd0f2b2ec9794","sha256":"5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f","sha512":"60a058b20fcb4f63d02e89225a49226ccd7758c21d9162d1b2f4b53bba951b1c51d3d74c562029f417d97f1fca93f25fdd2bc0501f215e3c1ef076810b54dd06","ssdeep":"768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+","tlshash":"cfc2f1878fd02879a72dfeb80252903197d00de93fea42318d99b70fe683987515e272","first_seen":"2023-04-09T13:59:19Z","last_seen":"2026-06-05T13:27:38.241585Z","times_seen":95342,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/GDSherpa-bold.woff","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.503415635Z","timestamp":1739880026503,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /GDSherpa-bold.woff HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 35970\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"GDSherpa-bold.woff\"\r\ncache-control: max-age=14400\r\nage: 2527\r\nlast-modified: Tue, 18 Feb 2025 11:01:14 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iKhDrZez3wfQsLBL6HRcZE81stZhGSFxvuTwfCuVTBlerrOy2qcyzJNdkH64vYh4hOgrNDgGTj4Je%2FXbq%2Fw7x4%2FlaQl6pT67CLfop3XjCEJ8li7yV288zRF23YDeo4kbujlBnQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=961\u0026min_rtt=949\u0026rtt_var=289\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=2177\u0026delivery_rate=2870168\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=4ea475d5e014c1d3\u0026ts=14\u0026x=0\"\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-ray: 913ddb558837b509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35970,"size_decoded":35970,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35970, version 1.0","md5":"496b7bbde91c7dc7cf9bbabbb3921da8","sha1":"2bd3c406a715ab52dad84c803c55bf4a6e66a924","sha256":"ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798","sha512":"e02b40fea8f77292b379d7d792d9142b32dfcb887655a2d1781441227dd968589bfc5c00691b92e824f7edb47d11eba325ade67ad08a4af31a3b0ddf4bb8b967","ssdeep":"768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV","tlshash":"a4f2d09831594c2aacbd58232b71d9df21e38f61ba42029ba193e4cd9c4714dbb1e47f","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-05-28T17:38:34.583252Z","times_seen":90507,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/GDSherpa-regular.woff2","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.508590656Z","timestamp":1739880026508,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /GDSherpa-regular.woff2 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28584\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"GDSherpa-regular.woff2\"\r\ncache-control: max-age=14400\r\nage: 2527\r\nlast-modified: Tue, 18 Feb 2025 11:01:14 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Be%2FFDpQOi4D4vhVGOJuOi1NGXc5C7Ur38OWWUwe44%2F%2FaFxSTxVBbhYpaVbsGPWTNUzd5doZ3gwvo891AI5YzXvR3WSZI8eTN70ZuAATafaOjHzGLykAuEAPspejdY7IMWN3WtA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=997\u0026min_rtt=982\u0026rtt_var=305\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=2182\u0026delivery_rate=2686456\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=0c042fd67ff4231b\u0026ts=14\u0026x=0\"\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-ray: 913ddb558838b509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28584,"size_decoded":28584,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28584, version 1.66","md5":"17081510f3a6f2f619ec8c6f244523c7","sha1":"87f34b2a1532c50f2a424c345d03fe028db35635","sha256":"2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956","sha512":"e27976f77797ad93160af35714d733fd9e729a9981d8a6f555807981d08d8175e02692aa5ea6e59cebd33895f5f6a3575692565fdd75667630dab158627a1005","ssdeep":"768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc","tlshash":"b4d2e0ed44d2c62988f7638902690111f27898ffe52d7db3c19da0b27245d7ea3a8b09","first_seen":"2023-04-09T18:51:15Z","last_seen":"2026-06-05T22:00:48.09838Z","times_seen":107516,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/GDSherpa-vf.woff2","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.515069571Z","timestamp":1739880026515,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /GDSherpa-vf.woff2 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 43596\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"GDSherpa-vf.woff2\"\r\ncache-control: max-age=14400\r\nage: 2527\r\nlast-modified: Tue, 18 Feb 2025 11:01:14 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DTK0JM81pTLvgpgwxpuTEwrvcyFdxUSHV6Slqq%2FNvxCb%2Bn%2BhMrMpa8qSTohJobGqclx5JXU7dUcWArgeFE1JsVvRlnK0MkCX6ubbHExM8HcZQqk1SeJmZs%2FkFO20FbPr22UfUQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1040\u0026min_rtt=1034\u0026rtt_var=401\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=2176\u0026delivery_rate=2664213\u0026cwnd=242\u0026unsent_bytes=0\u0026cid=f9c90f217e42bc00\u0026ts=18\u0026x=0\"\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-ray: 913ddb55883ab509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43596,"size_decoded":43596,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43596, version 1.0","md5":"2a05e9e5572abc320b2b7ea38a70dcc1","sha1":"d5fa2a856d5632c2469e42436159375117ef3c35","sha256":"3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec","sha512":"785ab5585b8a9ed762d70578bf13a6a69342441e679698fd946e3616ef5688485f099f3dc472975ef5d9248afaad6da6779813b88aa1db60abe2cc065f47eb5f","ssdeep":"768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf","tlshash":"e2130258592578a9eb43bd49f00c6e64c296b3d8f5832b62334a04f0bff651620fe797","first_seen":"2023-04-18T03:10:28Z","last_seen":"2026-05-28T17:38:34.608455Z","times_seen":91902,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/GDSherpa-regular.woff","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.520902234Z","timestamp":1739880026520,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /GDSherpa-regular.woff HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: font/woff\r\ncontent-length: 36696\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"GDSherpa-regular.woff\"\r\ncache-control: max-age=14400\r\nage: 2527\r\nlast-modified: Tue, 18 Feb 2025 11:01:14 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0n9KPvtYa1F2te9pIZ9mDeJHF9t6nQwNzd%2BTbZ1fsPS%2FXkiymGGIb5SHajILv4sBsHKCYGtIQbkg9tNjWKQkHDQJw7rPFeVf%2F2xf9Zm6sDVTM6pc3QsFj5dj3cwUslyna2BMdw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1024\u0026min_rtt=1003\u0026rtt_var=419\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2180\u0026delivery_rate=2462585\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=d01e47d9316ddcbd\u0026ts=14\u0026x=0\"\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-ray: 913ddb558839b509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36696,"size_decoded":36696,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36696, version 1.0","md5":"a69e9ab8afdd7486ec0749c551051ff2","sha1":"c34e6aa327b536fb48d1fe03577a47c7ee2231b8","sha256":"fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf","sha512":"9a0e4297282542b8813f9cc85b2ccb09663ce281f64503f9a5284631881da9aacf7649553bf1423d941f01b97e6bc3ba50ab13e55e4b7b61c5aa0a4adf4d390f","ssdeep":"768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU","tlshash":"31f2f15d76443e8cf06a245836ad2dd6a423171247138f8709de72bbd14f120f65aaff","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-05-28T17:38:34.607818Z","times_seen":90436,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/GDSherpa-vf2.woff2","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.535444571Z","timestamp":1739880026535,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /GDSherpa-vf2.woff2 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 93276\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"GDSherpa-vf2.woff2\"\r\ncache-control: max-age=14400\r\nage: 2527\r\nlast-modified: Tue, 18 Feb 2025 11:01:14 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Pd0LVl1cMWDdpG7EDH6oCs3i9287OtqVpYibbQov9d2RXjMDWSumpCiZtbGr%2F3WuLm0Jf%2B75cSbAJs52kyYZYkzqCky31A%2BUhcdAmML6Y3SDUYh2ipBEOzyu%2BXbEiaTqAq9Bhg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=984\u0026min_rtt=974\u0026rtt_var=385\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=2177\u0026delivery_rate=2747628\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=c9eefb6e3131a670\u0026ts=15\u0026x=0\"\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-ray: 913ddb55883bb509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93276,"size_decoded":93276,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 93276, version 1.0","md5":"bcd7983ea5aa57c55f6758b4977983cb","sha1":"ef3a009e205229e07fb0ec8569e669b11c378ef1","sha256":"6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c","sha512":"e868a2702ca3b99e1abbcbd40b1c90b42a9d26086a434f1cbae79dfc072216f2f990fec6265a801bc4f96db0431e8f0b99eb0129b2ee7505b3fdfd9bb9bafe90","ssdeep":"1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa","tlshash":"d293029c71ec79c19e00616e94c92535f89fdab0f049d3fa9a4ed85b927c369e343b10","first_seen":"2023-05-01T02:20:29Z","last_seen":"2026-05-28T17:38:34.569394Z","times_seen":91738,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7","fqdn":"ok4static.oktacdn.com","domain":"oktacdn.com","tld":"com"},"ip":{"addr":"143.204.55.81","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.571724151Z","timestamp":1739880026571,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1\r\nHost: ok4static.oktacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 10796\r\ndate: Thu, 30 Jan 2025 19:53:14 GMT\r\nserver: nginx\r\nlast-modified: Tue, 23 Feb 2021 04:20:08 GMT\r\netag: \"12bdacc832185d0367ecc23fd24c86ce\"\r\nexpires: Fri, 30 Jan 2026 19:53:14 GMT\r\ncache-control: max-age=31536000, public,max-age=31536000,s-maxage=1814400\r\nstrict-transport-security: max-age=315360000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: ZwgZv5uykFnFxMyguR-6NZ1mBaII4F_N4SpRlrsjibJQswNY7R0rjA==\r\nage: 1613232\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10796,"size_decoded":10796,"mime_type":"image/png","magic":"PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced","md5":"12bdacc832185d0367ecc23fd24c86ce","sha1":"4422f316eb4d8c8d160312bb695fd1d944cbff12","sha256":"877ae491d9aac5c6ef82a8430f9f652ace8a0dbc7294bd112aad49bd593769d0","sha512":"36c319ac7f75202190e7a59f3f3c92892a71d5f17663e672319a745b6574bcfde7c89b35f480cb15a193924dacb9d67f8ca1e1bc2bf33fc5ccbfa152cc7ba2d0","ssdeep":"192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0","tlshash":"7122af89d5a7d9387f3ff18c00be1fcb46f8a1f9760608b93989875d0641d9c188c499","first_seen":"2023-05-04T21:28:17Z","last_seen":"2026-06-03T14:13:08.295341Z","times_seen":38431,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/g/0e3e6804b971/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.640822113Z","timestamp":1739880026640,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/g/0e3e6804b971/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imcd.godendome.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Fri, 14 Feb 2025 14:12:08 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 913ddb31ecbe56b1-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16195,"size_decoded":48264,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48263)","md5":"8bde1466278edbc80095065c0a8606b6","sha1":"f99781a5a0fa1ae58218329f47c5163363b403d0","sha256":"5bba95cd14598342c37b07f71259e8813ba6c1e856d0bed270105f50d88309d0","sha512":"97930a5ab263ce446278b035777e7d70a7db85cd7cc3b2c6817c20bbee2dac9b6440223f17443994a80b6169624c1e6986832a39a1f05703adae4ca95f388345","ssdeep":"768:GHC+qxLCNuPhydZaR35KOJby4bmofHJ4zY5Z7Vt7jzEgVYMUsMePykWt/HKaN+Pf:GG2NuPhydZaR3gYe4bxeM5ZAsMe+thW7","tlshash":"ce231a987166797367da80e0607b634373297a39b94ccc509823c96536bcdcad233fb9","first_seen":"2025-02-17T10:55:06.197273Z","last_seen":"2025-02-20T13:17:23.831915Z","times_seen":814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"imcd.godendome.ru/wxn4RyQAKut3Z0hgdqrJBixqrxU7FaBgnrp12130","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.689388281Z","timestamp":1739880026689,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wxn4RyQAKut3Z0hgdqrJBixqrxU7FaBgnrp12130 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 644\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"wxn4RyQAKut3Z0hgdqrJBixqrxU7FaBgnrp12130\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MDDxsvy4QON1bKwDfHwohuBzu4XrUZ%2FTZhGDi3k0PayK43uFN7XTBJSIVl7eRUWijnrDndF2muEJ7jlfVPLW7gGQedI5AwrGwkyICrhapBmVHCoRMCRO4N%2FtFBm8CkX66KFhOg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1013\u0026min_rtt=998\u0026rtt_var=307\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2128\u0026delivery_rate=2709073\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=52d1bde7cd99524e\u0026ts=121\u0026x=0\"\r\ncf-ray: 913ddb55883cb509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":644,"size_decoded":644,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"541b83c2195088043337e4353b6fd60d","sha1":"f09630596b6713217984785a64f6ea83e91b49c5","sha256":"2658b8874f0d2a12e8726df78ac8954324c3bbe4695e66bdef89195fde64322f","sha512":"b2ae42ba9d3a63d3acb179051b005f2589f147d94f044616ae5dc5705e873f16057c56934262841191263b4c35804ef188bd38cf69cce0f4b2cf76c05f17b8ad","ssdeep":"","tlshash":"f4f00e3613a40b4ce5643ff860d10f03f37c7e22cb17aa66c10082221f049c86c9c2ca","first_seen":"2025-01-27T17:47:42.408787Z","last_seen":"2025-09-19T23:18:03.500571Z","times_seen":37683,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/qrHgHtUvBafBT7LAejGASXghyCG93rN5OkKYBzK67134","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.690754468Z","timestamp":1739880026690,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /qrHgHtUvBafBT7LAejGASXghyCG93rN5OkKYBzK67134 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 892\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"qrHgHtUvBafBT7LAejGASXghyCG93rN5OkKYBzK67134\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rx9cw3K9M8%2FGQDoDK2HYnY28M3U4pBVxj5riqdkUkRtU9VGscxgR6JpjfoQs6rB3zwhKLSVQlChK9yqqENs9t2Z5XpbgysbC3gy57zF2BaTvhEPjqEXx4Ayov3n7Rorvb2Z4eA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1118\u0026min_rtt=1112\u0026rtt_var=430\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=2132\u0026delivery_rate=2483704\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=31cfe8c94ab657c6\u0026ts=124\u0026x=0\"\r\ncf-ray: 913ddb55983db509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":892,"size_decoded":892,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41d62ca205d54a78e4298367482b4e2b","sha1":"839aae21ed8ecfc238fdc68b93ccb27431cd5393","sha256":"20a4a780db0bcc047015a0d8037eb4eb58b3e5cb338673799c030a3e1b626b40","sha512":"82b9806490a0db493da16466738437b9bb54b979075db58c89ca0d192d780ddb5ed888e10ce76a53d48d30d5013791cac7ab468d85b61d32766140dd53dc9044","ssdeep":"","tlshash":"a41120296b6053c8e7156bbc60c11f92ebbdb9124712627782c093366b489c6255c2d2","first_seen":"2025-01-27T17:47:42.408008Z","last_seen":"2025-09-19T23:18:03.480147Z","times_seen":36702,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/ophDKdJXERIvoQAbAULSEWt9lPA2XCuvOY7q9CCRc1K14c9eOhXNLf2I6sDVw5M1kef231","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.730569405Z","timestamp":1739880026730,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ophDKdJXERIvoQAbAULSEWt9lPA2XCuvOY7q9CCRc1K14c9eOhXNLf2I6sDVw5M1kef231 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9648\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"ophDKdJXERIvoQAbAULSEWt9lPA2XCuvOY7q9CCRc1K14c9eOhXNLf2I6sDVw5M1kef231\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DMhnJgsVPpGzdWVrspI8cEb%2Fg9k7PLeRG1mIOJ0ztVyU54Cr0jVDQi9%2BN6Efq1BAtOlINCf52MHPC%2Bel1T%2FYEX0sULTFSZQLUN3qNf4O5%2BkzfmW5kEAaLETUISyuC1mTnma7GA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1217\u0026min_rtt=1194\u0026rtt_var=380\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2822\u0026recv_bytes=2158\u0026delivery_rate=2120058\u0026cwnd=247\u0026unsent_bytes=0\u0026cid=7b9dd5a4b14bbb1f\u0026ts=130\u0026x=0\"\r\ncf-ray: 913ddb55c844b509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9648,"size_decoded":9648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4946eb373b18d178c93d473489673bb6","sha1":"16477acb73b63ca251d37401249e7e4515febd24","sha256":"666bc574c9f3fb28a8ac626fa8105c187c2a313736494a06bd5a937473673c92","sha512":"f684b90b748dc8399f76c5d8f94af6c4e6869143f18d19ce435b25eaa14e9647b120467bdd0795895676dc0cccdeabf82beb2f46ce2c5bf4c58ed9c134f30c48","ssdeep":"192:gwTgBYruFELhYmwd93mjW0l9OsENOLWcXdN4CLrHZfTtjOZgYM5cWjAaP6:gwTgBxaYmo5mS0l9OsuOL3NNVLlfTtjE","tlshash":"4a12af6f53b87b4cece19e3e4c48d73398fde91606176ac54a81a0c8d3988573a5228e","first_seen":"2025-01-27T17:47:42.409718Z","last_seen":"2025-09-19T23:18:03.495565Z","times_seen":37083,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/stdQGSoS2z9zfzDfAEtJBk5YoWTh3AUEQGb2tkUt1IoiiAzBkITmnIYhsZCQ22WKAMWzIygxcpHN8gh260","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.763270386Z","timestamp":1739880026763,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /stdQGSoS2z9zfzDfAEtJBk5YoWTh3AUEQGb2tkUt1IoiiAzBkITmnIYhsZCQ22WKAMWzIygxcpHN8gh260 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17842\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"stdQGSoS2z9zfzDfAEtJBk5YoWTh3AUEQGb2tkUt1IoiiAzBkITmnIYhsZCQ22WKAMWzIygxcpHN8gh260\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3tl5bMy3HWzJN%2Fp9IPRjmumKgTlt2cOX2zX3kBi0P9T1lVc7GfLzQXeQxq1IXhUHrlIBQceUMEy3uKFal4E5M95ECtIcdpBFqGzkLX7wkgnbRT8EWywX%2FLNSGKMsPGgQpyAIVg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=993\u0026min_rtt=986\u0026rtt_var=293\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=2170\u0026delivery_rate=2768642\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=4e904ed2b513775d\u0026ts=118\u0026x=0\"\r\ncf-ray: 913ddb55c846b509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17842,"size_decoded":17842,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b52ecdc33382c9dca874f551990e704","sha1":"8f3bf8e41cd4cdddb17836b261e73f827b84341b","sha256":"cce050cc3b150c0b370751021bb15018ee2b64ac369e230fe3b571a9b00d4342","sha512":"ac3d3c82bad9147ae5f083ed49c81a744f672ddfbb262135aa3f2c6601f8dffea11d8e323cef025c36d76c6f2515aa6814b622cf504ca01d13346e9ea989048f","ssdeep":"384:EwTZQ74B48VtrMvbt0sAvPTMaf+j5s8OYbqarRbjy5Qg1AR/kf63z/:hTa4B4mtYztAvPTMFhOYb3Rbu571AJa6","tlshash":"6c8218ba77256ca7e25c2bb77afd731b8062d78480681d92740f038aaf3913693901f5","first_seen":"2025-01-27T17:47:42.411749Z","last_seen":"2025-09-19T23:18:03.455649Z","times_seen":36919,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/ghQWbhPDwxEJp01N4ySbf6cNZZ2Xfng8ncnGzm2kl2ix9WIkop1jBH9SiPgkki7d2rPfsrLY12210","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:26.772346976Z","timestamp":1739880026772,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ghQWbhPDwxEJp01N4ySbf6cNZZ2Xfng8ncnGzm2kl2ix9WIkop1jBH9SiPgkki7d2rPfsrLY12210 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25216\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"ghQWbhPDwxEJp01N4ySbf6cNZZ2Xfng8ncnGzm2kl2ix9WIkop1jBH9SiPgkki7d2rPfsrLY12210\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UH18QEZ0KGAehvd95YTfl4W45EX6OKoNQ41IxUpoWlSx7XeCZt0lNW2fjx%2Ba6Ob58WuFR8LcSPjjB20ZW%2BoTe%2FB7sZ44lUbNLA%2FMuZZI%2FObnCDXZJ%2B6Xc9dAjTL5iPG2GqImBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1226\u0026min_rtt=1192\u0026rtt_var=395\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2820\u0026recv_bytes=2165\u0026delivery_rate=2156366\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=96c258f4fe089347\u0026ts=123\u0026x=0\"\r\ncf-ray: 913ddb55c843b509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25216,"size_decoded":25216,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9a795e2270664a7a169c73b6d84a575","sha1":"0fbb60ab27ab88c064eb347d0722c8ed4cf5e8b8","sha256":"d00203b2eea6e418c31baafa949ada5349a9f9b7e99fa003aec7406822693740","sha512":"e17c8d922f52c8ab36d9c0a7dc41d32735cf1680ea653056308c6d23255fdbe40b96c68f0e7f8b3b521b6acb080cd825f94320364b0a70141606a4449d980517","ssdeep":"768:BTwdm3bbEPDrEQT87zOyJ0WsnoU+RBshw:64LQXEN7DJGSRBs","tlshash":"35b2afbf1ad14f30c51a6435a2ef6d51f7cde3186f900ae895b046519b2e9bacf2d80c","first_seen":"2025-01-27T17:47:42.413017Z","last_seen":"2025-09-19T23:18:03.462271Z","times_seen":37027,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250218%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250218T115916Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=ebe86b7ae508e2e71c86ce7862d708e2d74395b45b5e7c458d8d1bcf0b946990\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Drandexp.min.js\u0026response-content-type=application%2Foctet-stream","fqdn":"objects.githubusercontent.com","domain":"objects.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:27.267644799Z","timestamp":1739880027267,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256\u0026X-Amz-Credential=releaseassetproduction%2F20250218%2Fus-east-1%2Fs3%2Faws4_request\u0026X-Amz-Date=20250218T115916Z\u0026X-Amz-Expires=300\u0026X-Amz-Signature=ebe86b7ae508e2e71c86ce7862d708e2d74395b45b5e7c458d8d1bcf0b946990\u0026X-Amz-SignedHeaders=host\u0026response-content-disposition=attachment%3B%20filename%3Drandexp.min.js\u0026response-content-type=application%2Foctet-stream HTTP/1.1\r\nHost: objects.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Tue, 07 Dec 2021 16:38:45 GMT\r\netag: \"0x8D9B9A009499A1E\"\r\nserver: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000\r\nx-ms-version: 2023-11-03\r\nx-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT\r\nx-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg==\r\nx-ms-lease-status: unlocked\r\nx-ms-lease-state: available\r\nx-ms-blob-type: BlockBlob\r\ncontent-disposition: attachment; filename=randexp.min.js\r\nx-ms-server-encrypted: true\r\nvia: 1.1 varnish, 1.1 varnish\r\nfastly-restarts: 1\r\naccept-ranges: bytes\r\nage: 4937\r\ndate: Tue, 18 Feb 2025 12:00:27 GMT\r\nx-served-by: cache-iad-kiad7000045-IAD, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 11369, 0\r\nx-timer: S1739880027.761634,VS0,VE1\r\ncontent-length: 10245\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10245,"size_decoded":10245,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10017)","md5":"6c20a2be8ba900bc0a7118893a2b1072","sha1":"ff7766fde1f33882c6e1c481ceed6f6588ea764c","sha256":"b1c42acd0288c435e95e00332476781532ed002cac6f3dcee9110ced30b31500","sha512":"8f80ad8adc44845d24e13d56738a2ca2a73ee6fcdc187542ba4aaebbf8817935d053a2acfb0d425b9cc0c582b5091e1c9fe16b90b3aa682187645067c267fc41","ssdeep":"192:LRSvXVHfVj+WdqfkkoKhUBhMAcT6iuvBiFj0gba6qiG2pPj:LQvXVHXiNkMAcT6i+4mgPj","tlshash":"ce22a58932933026af5391b440bf140af2f69589d45cade8ab29d1e27d7290d46f7f38","first_seen":"2024-05-30T22:56:13Z","last_seen":"2026-06-05T17:08:39.327981Z","times_seen":52575,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"imcd.godendome.ru/yz9SskUU203P8ezbPvvv6RK0FosZ5nXXGlC8opwa8YXVGUNaP1TTo2NP90172","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:27.413268931Z","timestamp":1739880027413,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /yz9SskUU203P8ezbPvvv6RK0FosZ5nXXGlC8opwa8YXVGUNaP1TTo2NP90172 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:26 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 913ddb55983fb509-OSL\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"yz9SskUU203P8ezbPvvv6RK0FosZ5nXXGlC8opwa8YXVGUNaP1TTo2NP90172\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kmZdIl7pH%2FAEeVoS6HN%2FxXDARSyNnxT%2Faj5XeP7OG%2BmE5cIPdx7vXKFMw%2FUAZEJFZnJ0YOXSdNXk%2BEOF0wXH1xyL4hr1DGaaYv2X0aMwVas356LSzj%2FA1ONTKulUglAPgY7o0w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1023\u0026min_rtt=1005\u0026rtt_var=293\u0026sent=4\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=2820\u0026recv_bytes=2149\u0026delivery_rate=2819863\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=95d466e8ba929fbb\u0026ts=117\u0026x=0\"\r\nvary: accept-encoding\r\ncontent-encoding: br\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21575,"size_decoded":2905,"mime_type":"text/plain; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"fe87496cc7a44412f7893a72099c120a","sha1":"a0c1458c08a815df63d3cb0406d60be6607ca699","sha256":"55ce3b0ce5bc71339308107982cd7671f96014256ded0be36dc8062e64c847f1","sha512":"e527c6cd2a3d79ca828a9126e8ff7009a540aa764082750d4fa8207c2b8439ca1fdc4459e935d708dc59dcffe55fe45188eb5e266d1b745fca7588501bc0117d","ssdeep":"","tlshash":"3451db770328eede9190e7881b65b20eb7f4896474bb81d08f879c46ec06bb7913cd60","first_seen":"2023-05-04T15:09:09Z","last_seen":"2026-06-05T16:43:35.832631Z","times_seen":90328,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"imcd.godendome.ru/ijY3EpyS48dPnA1gEURdZLG2LhLbHuJrOqrTMZauSsWBLnwKlQfb4yry1n5Jd7ab230","fqdn":"imcd.godendome.ru","domain":"godendome.ru","tld":"ru"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-18T12:00:27.546840475Z","timestamp":1739880027546,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ijY3EpyS48dPnA1gEURdZLG2LhLbHuJrOqrTMZauSsWBLnwKlQfb4yry1n5Jd7ab230 HTTP/1.1\r\nHost: imcd.godendome.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imcd.godendome.ru/YBRTYNVDUDNkz0mhr255hks028ruujfq?ZRLDKUSLLCGG\r\nCookie: XSRF-TOKEN=eyJpdiI6IkUzN3lWNmMvMXVTcVdIUURDS3NGVXc9PSIsInZhbHVlIjoiZ0lvSUNaN1RIZXZBRy9tWVhXS2ZNVnhVOTA4SVNJZTQ5MTJMU0dyNktzM0h2L0lBQmNvTi9pSzh3eGhPZTNPeTQ2czZ2Y2RUWXg2T3hhS2Z4WDMreVNtdmppQjJhL1QyWGI5YXlQZXRha3ZRL1ZpazhBOU1udWJteGlEWFlKdkoiLCJtYWMiOiIwYWEwNmQ4MzY2YWIwZmFkZTExYWMyMjMyZjRjMGI5Y2RkMmNkODZmNzZkOWVkZGFlZDdjMGZmNWFjNDQ0OWNhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRSbEc5TmFIL0hGb285ODJvN1lxVmc9PSIsInZhbHVlIjoiV2d0WUhHTnRvWEZUTGRxSmVoN1JlOHZObzdJZjh0TTFXVlpIK3BuQUczZUE5cW9tUDd0T3lRd0Zka296N2pabS9oUmhIdUhHamQ0Y2lRdHdtajArL1NtTFk2dEJCbVIrVlJTSUhCUlJCY0J6S0c5Yk1GemFCY0VYTi9QQVRnZFgiLCJtYWMiOiI3MzJhNGU3OTM4OWIxZTlkYzhkNjRkMTI4NjBhZGI4ZmM3MTcwNDg0NzJlODNkZGNkMjM5OTJhNzViMTIwMjIwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1298\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"ijY3EpyS48dPnA1gEURdZLG2LhLbHuJrOqrTMZauSsWBLnwKlQfb4yry1n5Jd7ab230\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C9iEEGUF02GmT9xF8ir%2FAxRMA4mrBdwGCJVt9LGHZ37JhB5x4XacsxAfKPUD%2BxekvJgbmEPn6tnPdNSxgTVB2qt21P6qIHhHIijZbI5fZDoDYUeBi8X0O2g6Zw4ob090EUwNWw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1246\u0026min_rtt=1212\u0026rtt_var=479\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2821\u0026recv_bytes=2155\u0026delivery_rate=2389438\u0026cwnd=250\u0026unsent_bytes=0\u0026cid=fbab11326f2d872c\u0026ts=122\u0026x=0\"\r\ncf-ray: 913ddb5b1862b509-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1298,"size_decoded":1298,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32ca2081553e969f9fdd4374134521ad","sha1":"7b09924c4c3d8b6e41fe38363e342da098be4173","sha256":"216fc342a469aa6a005b2eacc24622095e5282d3e9f1ae99ce54c27b92ec3587","sha512":"f75749c6344fcd7bf06872a3678bb2eb4cae2ddc31cc5d1ee73efba843705577841667733a83163af4336ec8a32df93e7a36155bd6282d7bb86159644975948c","ssdeep":"","tlshash":"53210aba23a84b4df0121e3016c04b92b7b5b9329ad693938106cf330f964cd7c6c08e","first_seen":"2025-01-27T17:47:42.419846Z","last_seen":"2025-09-19T23:18:03.501321Z","times_seen":33195,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"heapanalytics.com/h?a=3922783258\u0026u=8562232276747338\u0026v=5109077064164684\u0026s=2705402496382861\u0026b=web\u0026tv=4.0\u0026z=0\u0026h=%2Flamb-building%2F\u0026d=brandpad.io\u0026t=Lamb%20Building%20-%20brand%20identity%2C%20guideline%20and%20assets.\u0026ts=1739880011782\u0026sch=1024\u0026scw=1280\u0026st=1739880011785\u0026lv=4.23.5\u0026ld=cdn.heapanalytics.com","fqdn":"heapanalytics.com","domain":"heapanalytics.com","tld":"com"},"ip":{"addr":"3.224.245.224","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.788Z","timestamp":1739880011788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heapanalytics.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 18 Nov 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"23:D0:B6:D9:57:EF:54:C0:7E:B2:6C:06:02:43:65:E3:AE:BF:9C:96","sha256":"FA:E5:C6:3F:CB:AB:95:C2:8F:1C:FA:74:7D:0A:3A:9E:84:B0:C4:0F:B7:F2:54:D3:2A:50:B4:DB:B1:78:67:C4"}}},"request":{"raw":"GET /h?a=3922783258\u0026u=8562232276747338\u0026v=5109077064164684\u0026s=2705402496382861\u0026b=web\u0026tv=4.0\u0026z=0\u0026h=%2Flamb-building%2F\u0026d=brandpad.io\u0026t=Lamb%20Building%20-%20brand%20identity%2C%20guideline%20and%20assets.\u0026ts=1739880011782\u0026sch=1024\u0026scw=1280\u0026st=1739880011785\u0026lv=4.23.5\u0026ld=cdn.heapanalytics.com HTTP/1.1\r\nHost: heapanalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Feb 2025 12:00:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 37\r\nserver: nginx\r\ncache-control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\npragma: no-cache\r\netag: W/\"25-4iFqfptz9csCeTUceM5hwzR1zqc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: POST, PUT, GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37,"size_decoded":37,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"3eacd0132310ea44cad756b378a3bc07","sha1":"e2216a7e9b73f5cb0279351c78ce61c33475cea7","sha256":"bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96","sha512":"bd9ab35dde3a5242b04c159187732e13b0a6da50ddcff7015dfb78cdd68743e191eaf5cddedd49bef7d2d5a642c217272a40e5ba603fe24ca676a53f8c417c5d","ssdeep":"","tlshash":"76800003caa00003e2aae0320a0803002380a23002ac030e80aca0acecaa0a20c00000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-06-05T22:05:29.249767Z","times_seen":30594,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":303,"dns":11,"connect":93,"send":0,"wait":94,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.brandpad.io/legacy_fe/brand/main.e595d960c0ac9b45d465.js","fqdn":"static.brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"143.204.55.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.070Z","timestamp":1739880011070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.brandpad.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 03 Jan 2025 00:00:00 GMT","end":"Sun, 01 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:D4:81:BD:4E:88:92:9D:31:95:1A:7A:19:2D:01:63:5A:F0:7D:BF","sha256":"62:92:45:EE:0E:43:47:FB:BF:84:9C:BE:15:35:8A:2D:06:A4:10:6E:1E:BD:96:E8:E1:03:0A:13:EA:C6:9A:20"}}},"request":{"raw":"GET /legacy_fe/brand/main.e595d960c0ac9b45d465.js HTTP/1.1\r\nHost: static.brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sg.IS2rmaWt1BJa5nKVp7kGcgsCwQg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Mon, 17 Feb 2025 16:41:24 GMT\r\nlast-modified: Tue, 11 Feb 2025 07:49:40 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"d329097a83eb93bd918348dcf43c851e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: Dd9o7cJ00i5vbCU0M1hhS9wsX2MaVLH0_r2ndJX0420Fqi64wC4plA==\r\nage: 69528\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":120830,"size_decoded":120830,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-05T22:09:33.277864Z","times_seen":16156336,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":77,"dns":77,"connect":1,"send":0,"wait":1,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.brandpad.io/legacy_fe/brand/main.e595d960c0ac9b45d465.css","fqdn":"static.brandpad.io","domain":"brandpad.io","tld":"io"},"ip":{"addr":"143.204.55.95","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brandpad.io/lamb-building/","date":"2025-02-18T12:00:11.060Z","timestamp":1739880011060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.brandpad.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 03 Jan 2025 00:00:00 GMT","end":"Sun, 01 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:D4:81:BD:4E:88:92:9D:31:95:1A:7A:19:2D:01:63:5A:F0:7D:BF","sha256":"62:92:45:EE:0E:43:47:FB:BF:84:9C:BE:15:35:8A:2D:06:A4:10:6E:1E:BD:96:E8:E1:03:0A:13:EA:C6:9A:20"}}},"request":{"raw":"GET /legacy_fe/brand/main.e595d960c0ac9b45d465.css HTTP/1.1\r\nHost: static.brandpad.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brandpad.io/\r\nCookie: session=eyJfcGVybWFuZW50Ijp0cnVlLCJjc3JmX3Rva2VuIjoiZjY4ZTdkMTcyNTMyODYwNWRhYWFjODI3MTNhYTBkZWE1NTY0MTRhNyJ9.Z7R2Sg.IS2rmaWt1BJa5nKVp7kGcgsCwQg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ndate: Mon, 17 Feb 2025 16:06:26 GMT\r\nlast-modified: Tue, 11 Feb 2025 07:49:40 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"25a9cbe510017778332a81f5f7a19567\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: oOJuv2mKeUZNalG3ggW0OLzhBRBEStn6ErSCZeDPCL-jn7k0vqg7JQ==\r\nage: 71625\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51776,"size_decoded":51776,"mime_type":"text/css","magic":"ASCII text, with very long lines (51718)","md5":"25a9cbe510017778332a81f5f7a19567","sha1":"d3a30352fb0c95e2e75b4d9b0903532d9089e423","sha256":"b2642123dc3af0666b04d66f1c7311df22ac5d92a03eb01851c969b0c449475c","sha512":"53d21c4efc0b9b5bb56c74ac454141c5c2d70bce2d831fe08e48911ea71d00e792ad13a722929dbec0f31b802213e37b0f865db8987f49233498bc65a75aa17e","ssdeep":"768:bfjLLp74KI7jJwWHH7wWAv3qutzdXlz1PjbffrzfY2T20jLLpskejLLpv2cVCGfF:bV4KI7jJzH7wWAv3qzVCb6MdS","tlshash":"3d3396279540f61c90138a6627c9a668333ee017b7170eed67239819cfab3d652b374f","first_seen":"2025-02-18T12:00:38.4192Z","last_seen":"2025-02-18T12:11:55.427277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":90,"dns":72,"connect":3,"send":0,"wait":4,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}