{"report_id":"5e811a10-21b5-4799-b938-dc2edab76e56","version":6,"status":"done","tags":[],"date":"2026-04-29T10:33:57Z","url":{"schema":"http","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8%20%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8%20%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8%20%D0%B2%20%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%BD%D0%B0%20%D0%BF%D1%8A%D1%80%D0%B2%D0%B0%20%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F:%20%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8%20%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D1%81%20%D0%B4%D0%BE%20-30%25%20%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=164680\u0026alt=SgoffVVJZTUBK18aAxt3IiEqCiElDiYUTzIUU1koDAsjbAsoXlBTQW54enFKcFNK\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"title":"Самолетна почивка в BJ Playamar Hotel \u0026 Apartamentos, Палма де Майорка - Юни и Август","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8%20%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8%20%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8%20%D0%B2%20%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%BD%D0%B0%20%D0%BF%D1%8A%D1%80%D0%B2%D0%B0%20%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F:%20%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8%20%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D1%81%20%D0%B4%D0%BE%20-30%25%20%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=164680\u0026alt=SgoffVVJZTUBK18aAxt3IiEqCiElDiYUTzIUU1koDAsjbAsoXlBTQW54enFKcFNK\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-03T10:33:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"accounts.google.com","ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-04-27T01:21:15.781201Z","alert_count":0,"request_count":1,"received_data":264829,"sent_data":409,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rio.bg","ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":951031,"first_seen":"2012-09-30T19:26:19Z","last_seen":"2026-03-11T13:08:29.341656Z","alert_count":0,"request_count":57,"received_data":2599459,"sent_data":131985,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Funding Choices","description":"Funding Choices is a messaging tool that can help you comply with the EU General Data Protection Regulation (GDPR), and recover lost revenue from ad blocking users.","website":"https://developers.google.com/funding-choices","common_platform_enumeration":"","icon":"Google.svg","categories":["Cookie compliance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]}]},{"fqdn":"old.rio.bg","ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-29T10:34:01.926108Z","last_seen":"2026-04-29T10:34:01.926108Z","alert_count":0,"request_count":21,"received_data":1588796,"sent_data":12170,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fundingchoicesmessages.google.com","ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":4438,"first_seen":"2019-01-16T15:59:52Z","last_seen":"2026-04-22T20:53:07.153037Z","alert_count":0,"request_count":4,"received_data":232670,"sent_data":2536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-26T22:25:05.471148Z","alert_count":0,"request_count":3,"received_data":1466946,"sent_data":1312,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":2,"received_data":57954,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rio.bg/photoswipe/photoswipe.min.js?revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"90d5a5ff4789f25f79840f95fc089c0e","sha1":"791703278e7c576b08b67f18404bae9eb8cebfaf","sha256":"886d6d884e7125225084a75e396e1c3e24b2f914eb9d12a38e3ad543485ec6e8","sha512":"0a054820cdaf871d2fd130ca77339f5a2082402597c11878b5103387dc813b375ee77ca88d124c3abe3321b5ad7fa69776d6f81c15a0e61b2f724b59b61ce77c","ssdeep":"768:tC30VmiVxAtMTvnSr4l9d+eaJJubAw5qHm6oQnYxZGplj:tCHiVyeTvnS87ds3upqG6hnYxAj","tlshash":"90e2f7887386356393a731b6203f5a0922372ea3fa499dd46d27d0e17d78e6411bfe1c","size":31903,"data":"","first_seen":"2023-03-07T01:07:39Z","last_seen":"2026-04-29T12:35:47.709704Z","times_seen":1289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/orestbida/cookieconsent@3.1.0/dist/cookieconsent.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"811fdc294d76838aea83f34c9608a303","sha1":"6604b61f1b15639119ce33c5a196c57073143080","sha256":"bc6e2f2e6381fc025b27a6b0afb5a0e1fc689c6f9fc40a78708adb2054ef4575","sha512":"a4323e926bcc069ee2ebd73556bd5a35d41fee51ae6061dc3993f12d351a893a18f870287d49103be3453071f8c316c2c1d6708174fd8a81c1a26bf240b538e2","ssdeep":"384:wu7uPZ9QdIVahu1LMFuELKQbkWJf3DG/iXsSyCre9Yrc6wF0dlF+1xk+DcEa71WY:wugGIVaI1LMFuEmikWJf3DdXsSyCre94","tlshash":"86b2e9923549f02d53f949eb2df20225f2235405385d9dc0f25c6d6f3da7a8262e3faa","size":23459,"data":"","first_seen":"2025-03-14T04:53:39.979957Z","last_seen":"2026-04-29T10:34:08.258509Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/imagesLoaded.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb411709239fc1237247375ccd42734b","sha1":"698e5faec4bebf30920c55968d99020195112305","sha256":"b05ae9a8e1ca11d6896593b4944ed7b744989283709ffc1fb3891e965d4d1e0e","sha512":"da98298bdb6a3f5d4a6565ddd3ab7fe647f4b8a9ad61649316987e858bbc99e00229f6ae5b7ce8d26d37415d65fbb67d965b36b9f7c806dab7c3cb4b6b528d44","ssdeep":"","tlshash":"73319f66fbbf72054a2270941c1f118c323ce06b994ce5abf96d01d49be062d9376f35","size":1680,"data":"","first_seen":"2026-04-29T10:34:08.266765Z","last_seen":"2026-04-29T10:34:08.266765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/reservation.js?rev=2340","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9589bb4e5c279b0cee72887dd3620673","sha1":"173a8ad635f137b95a3c07699f2ec89ac7767466","sha256":"baffa41f8072829eb8e9ad173d0632e09c1a02e9b798c3f2d0a2e90c9767ad3d","sha512":"b92c326b5dfa4d8ead1dfa8b055f8d2e6148c375d959ecbe95d4de9215025d06b2041fed50c5d5ec2afb46e54dfe69f2b31836ac819f5634fdd639defab722c1","ssdeep":"192:fLbj5gGlM55Z88ZUeGNAsKqmYQY7PGGlg3o0:Tbj6wq5Z88ZUFNdQYqGlg3l","tlshash":"d7d10048fbec7359813b30a64c6e90ce333d5125554158bffd6891e418e0d296bbbeb8","size":6174,"data":"","first_seen":"2026-04-29T10:34:08.223493Z","last_seen":"2026-04-29T10:34:08.223493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f147285bb668c32fe28183a9c353b6","sha1":"d4cb9722f8684686966e7beb50496f6ff1a7b3b0","sha256":"a3e11b816840c31830bedccf8f5df64f2923d7c7fbca5044ed5f3e5d8860c5cf","sha512":"8906f9e6b80dd3b8e420f27de910bf766307d60a89ee3c0f5bde3e9d25a52ee1db69b00e6f0507346931d394b868e6647065393e65a965234cd45be81ef991f0","ssdeep":"","tlshash":"bae0c2dc242b0c3545e3364f4b3db00032202107e84abfe03a1e81580f98b4b87a1d34","size":353,"data":"","first_seen":"2026-04-29T10:34:08.293042Z","last_seen":"2026-04-29T10:34:08.293042Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d1e9d1f1db22f2f9718e74c4de7798f","sha1":"a1ed54baf733b3ed06aaa80ac977eb0ef7e9bbfa","sha256":"0d602f89d2af12c4df83cf50fc382829ffbb709a03810df515f8e37d3e209a3f","sha512":"a64b87dac8f8697896db41f229e4b2627442cab4dd0d9d9f8e5ff4bd452b146e2a2f2a3e1b4be47b1054e1d3edbca4d877b4939fb48f6c157a8671a41c61d84c","ssdeep":"","tlshash":"98f0b489f29ca160013b34be217b1288293b285235061654fdf44aa54ae96181363e3c","size":501,"data":"","first_seen":"2026-04-29T10:34:08.294137Z","last_seen":"2026-04-29T10:34:08.294137Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/slipper.js?rev=3261","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f09a4fbdebda6cd89b6f77065249f89c","sha1":"c96823bc13047256ab77a04e4b2cb3444eb5a005","sha256":"7a739412183f62e58c1d6505fbebad2682f828c3d8b3788461c02c1e7f02992b","sha512":"f54d031da9273612d8aa534931d7c255e2274bfe727eee51cf2de94d748d30c2e3b7ca60e6f964fdbd42404e8d8d8c962637a5147a55b15f45af3fdee389b18a","ssdeep":"192:+qSqHFthF5fCN/zRcftr7bvXavmsD5jfoysp7qgAedYMrhV6dwMa1xIrdWEgcv/g:WehHKN/zR+9a1FKkIq6hEuLH4dngeI","tlshash":"a652744a77f214a55657b07e8baf8a48312200d79e0fcf507dad8688df900392bf17ad","size":13906,"data":"","first_seen":"2026-04-29T10:34:08.259238Z","last_seen":"2026-04-29T10:34:08.259238Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/aplication.js?rev=7243","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"114aea2e26ec4696f3e53c1737054499","sha1":"a4ff6b058d68ee3f5ccb435f54841fe0e2f22391","sha256":"626f19c7b6ec1348332a2197930affaa123b402ef688f2a40b3104b341a91964","sha512":"dd26a4df4c7673ef98e58268d1d43d3b7e5e3703df023ab135f87ba7dd34640c031d2949e6e72092cf6cfff2dd04710e18cd4a43e75e9eaa459487f1ef61a28b","ssdeep":"192:n7IWtSA6KCe/a4gLqA6bVcKjMVLKFvHoXd3OXv6anA0:n7ITK1mLAkcoXZYv6cA0","tlshash":"ac220d0db5fb62601177313f0fff90482a26690b15098e04be4f46a84fe0298f67ba5f","size":10700,"data":"","first_seen":"2026-04-29T10:34:08.28645Z","last_seen":"2026-04-29T10:34:08.28645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/cookieconsent-config.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a424c80f0fd834b4155aa65fee0deac","sha1":"89c4895ca388df3a01d46676d734ae436aae17fe","sha256":"79a631b2c51b4cb4fb432ffff56025419b6aff4789a8a5a9a0acb8192ed6df62","sha512":"378227d5af25a197c5e920ea64c5c81cc2046a059c045ece00d12c670cf305656cc137d65117240c5ec14b5f74c92e08e5e843581918f22ec11302e5a0fbab27","ssdeep":"96:vTEKlrG0y6cG0y6OapbWyCyycpkFkpGR6DC5MUBFmb7ShLYHjvUBFsVtHZL/LabP:vgKmbnCyycGNV5LwjKMZL/LabCyD","tlshash":"06220cf956ae744a4102f12a884d3609796580ff3feaae75356c09ac3fc823c85f635d","size":10050,"data":"","first_seen":"2026-04-29T10:34:08.264201Z","last_seen":"2026-04-29T10:34:08.264201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/_/mss/boq-content-ads-contributor/_/js/k=boq-content-ads-contributor.ContributorServingResponseClientJs.en_US.C31BmpdH3ps.es5.O/d=1/rs=AJlcJMwUwDfofeLtlS1A0r_HyqswZx_cPQ/m=kernel_loader,loader_js_executable","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ede712d130e914bd9edf0fb26222e3","sha1":"aed219d0d7cdbfa811e0bcef45f5b5c628f4faa5","sha256":"072dc4838b671c027f9ffc236d75cb6af3e719178c78c031f8ca7ba2c511f68c","sha512":"962614e6db4d160179b11f5de77dd0cfbbdc91cfffd4844d0637786710bcf6f7320f9c14746a2bcb402a9f7d6c2117ad502ce19c32d16fcc2751bddff22f7990","ssdeep":"3072:n0SGO+/oK38zUwIhcy4AMBFchwTu6B637GVZsaKGFDXkWrdDWp7:n0SGHLfw3BO7Grs/+DXkWrdDWp7","tlshash":"8a24b69872d274a69263f8a6413f400ab1bf68a3e4488cacf265ddd17ef05098537f7d","size":222736,"data":"","first_seen":"2026-04-29T10:34:08.290874Z","last_seen":"2026-04-29T10:34:08.290874Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/jquery-and-custom-scripts.bundle.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5939873a660b1e61c1115739a4912f9","sha1":"491a84c7ccc5db81b4c70f3765ff5eee7adfb41b","sha256":"9223606b3a3428abb25460bb3ff827329bcd7c5b6b81608f913a2f0df8eb8c0c","sha512":"238756d613a8ac02b536664d12d64474ba4950b2b227f836dfe9b8ff3a35cc6833da96fd868ee1f56a25b063ef37a44f54fc89e52ba12062bbe01d883e4e0747","ssdeep":"6144:4+Etc2ISE/p1YOfmnhx8rsJ0gHy6LobQcLwOr:DmlISo1YOf2hxiwLobQcLwOr","tlshash":"2084088db241752282eba1a8102f160fb237655da605809cb13dcdeead7ce48717bf7d","size":380447,"data":"","first_seen":"2026-04-29T10:34:08.233953Z","last_seen":"2026-04-29T10:34:08.233953Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b57d3d8fc6278794101c4d15039421aa","sha1":"35de5e9ca9e2489b33b88063769601126c13b4a2","sha256":"334c8c41e073cc372bbe76066469a4de7c8a7a1c0ad6297aaba099771d73f7c7","sha512":"7d6ae816ec3e8167f7530d3e8896cfb0452be3e2ebde9e00664dc7738b3de59fb31057a946434bac733f05f01e8bd8ebd7a4041980a98d13bd70f2678a3143ab","ssdeep":"","tlshash":"6cc02b1cf66c051001f3323c1c3f4d0d1432600335071609f16866700eee21f0031a04","size":137,"data":"","first_seen":"2026-04-29T10:34:08.295039Z","last_seen":"2026-04-29T10:34:08.295039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/lodash.custom.min.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c0c7ee41b5d969045211f8d8b789195","sha1":"7bb371be47f2a19836f3d73892465131805ec109","sha256":"559a2fc9edb54cb8a4de3455b3a84bf7fe9fc29577d0e9f4436e8e37e5b0cf7f","sha512":"db731c1d1de7a3c2e24b1963bf4b5bac369837cce6fe6536c46ebe0677b7556001eae50c5ea380fa26df6fdc2c34ee9f2150a0478022fd0d8d73c58f106f6951","ssdeep":"","tlshash":"f15131c534d6f04593a70931c0bf650bf178a9b209df9491e2b5d0f8b9b806c5263f2a","size":2736,"data":"","first_seen":"2026-04-29T10:34:08.24848Z","last_seen":"2026-04-29T10:34:08.24848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/reservation.js?rev=2340","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9589bb4e5c279b0cee72887dd3620673","sha1":"173a8ad635f137b95a3c07699f2ec89ac7767466","sha256":"baffa41f8072829eb8e9ad173d0632e09c1a02e9b798c3f2d0a2e90c9767ad3d","sha512":"b92c326b5dfa4d8ead1dfa8b055f8d2e6148c375d959ecbe95d4de9215025d06b2041fed50c5d5ec2afb46e54dfe69f2b31836ac819f5634fdd639defab722c1","ssdeep":"192:fLbj5gGlM55Z88ZUeGNAsKqmYQY7PGGlg3o0:Tbj6wq5Z88ZUFNdQYqGlg3l","tlshash":"d7d10048fbec7359813b30a64c6e90ce333d5125554158bffd6891e418e0d296bbbeb8","size":6174,"data":"","first_seen":"2026-04-29T10:34:08.223493Z","last_seen":"2026-04-29T10:34:08.223493Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"77023892acef946ba1dba43da48a9df6","sha1":"b855d179929ed7e2d186b47c22c16492d230b59b","sha256":"993c13816ecc3646b505485ed10537c7a6433c85ab84658a836054300da5172e","sha512":"64fa26480a1e36f90eba9e95199eda3dbb50ac5aed5e4836f2da9a0a2a4a16f23700e989d2839a05b8772eeb9841fbe568d3bb5090cee6b2356096127d45fe9a","ssdeep":"","tlshash":"11e0262934d2103613b3457933f791462527271bc45dcb127a5fc6d65f24d56054664c","size":373,"data":"","first_seen":"2026-04-29T10:34:08.29595Z","last_seen":"2026-04-29T10:34:08.29595Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c80f0d0ac339b043fef899b1363b1456","sha1":"f7be56b3e26776f3ca19fa6dbb432fc033225262","sha256":"9591806a416e9ffcb624ee085f5b5621dac5a1cef5536bc1fe7c4abc01f0aabd","sha512":"d5b57c5c844b0e6da55248aa7cfb220b1be4e9470dd4497822a180c3daa500dcf451e5a724f14f550a98c5e19a19793d469af8a082e3c9628c7d12ea8fddeadb","ssdeep":"","tlshash":"6f3120e6c9a2915d26ec39b5c7b73ced32a46802e100d77bce3e3847d0986315081f09","size":1754,"data":"","first_seen":"2026-04-29T10:34:08.296891Z","last_seen":"2026-04-29T10:34:08.296891Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"61278df0537ed59b840036f8fc2ec90c","sha1":"c88f4b189161641182bd895b678ca9414345b266","sha256":"448223fcb074992c87fb8892a0d39b2736d28c5411a47e332b831975bcd8cae1","sha512":"506d7d8963218f1651ecda2fb042536275882bf6ddc072337d9d046f19fe3e144f316836625b9f5ce11dd972fc779fbc9eb1afc26b9b9a0fa05c54c6cad4ea33","ssdeep":"","tlshash":"0bf024db113e481125e2124fbf2ebb48343720b2b9c0b873390e06102b2ab0fd1e6ad5","size":541,"data":"","first_seen":"2026-04-29T10:34:08.29778Z","last_seen":"2026-04-29T10:34:08.29778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"efd06919c3408459b48a8b1bed598b64","sha1":"ea02884664cbdae71849b97f41dd86c11c07b7b8","sha256":"184c467aec1e24d10b94323f4c326b4ece0f573ce7969eafb3d53a24d7813219","sha512":"d6f4aa295eaf696b5ccca1566b0d8b1c6b3ea8cefb3b5d3b424bc698e271f4b784112148b9229b6c5e80f55729f593e4015db93097c4dbacb17fe73817700b4b","ssdeep":"","tlshash":"fb110149e6fa125216fbb5731afbb71c1613446788446b283c8d2be02fa0e2645c3af0","size":1102,"data":"","first_seen":"2026-04-29T10:34:08.298701Z","last_seen":"2026-04-29T10:34:08.298701Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/photoswipe/photoswipe-ui-default.min.js?revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c061a13816b98ce8c8a7ffb2e62dc403","sha1":"d80b713ca1bab90f27a8af7d8e43563f0fe81860","sha256":"5ef4a4e8ea6aed767ca14731db5dccb62917b5b9796db7b843db6be3e3490428","sha512":"46e2943d35b8a8aece512d58aac84d9beb029ac1af332cc07335080568bcc272e37994ddd597a287f0f70bbbb25eb9d956e6b0f241ee29f8a573b1b2102b656a","ssdeep":"192:Q7AC3oipl7XNvFSTBv/CpvNE5qds7DKDTlxnnoT+eXhMKrqvwZpukR:Q7N3Z79gdqdsnK19oKahMkhZpukR","tlshash":"1312e6b8b046b2df51e379aea23ff40d61371b65b086f4926131d8a61e7c948502ff2c","size":9878,"data":"","first_seen":"2023-03-07T01:07:39Z","last_seen":"2026-04-29T10:34:08.283217Z","times_seen":1446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/sidebar.js?rev=1348\u0026revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"660447acde839d185b4814540260d150","sha1":"ee215949c5ce9cd11880170e6535569820ad1b0d","sha256":"039ee4f6f8e47b2f9c4ec84018782f955210839fa46d73185e32fbe70f0522a8","sha512":"0b10cb3b60e30f667de23d6ae15a792764d9ac734a08c8587797dac6102106d258492cccf4b8d62ec67c775fd4f3d9b8283540db19fff2df37bd6f6da38da41f","ssdeep":"96:i0mnglnDf/+0OLnnGIExATQm/offRjw6U2aG/w1U2YlGn5pH9HZ1SLxX:bmngu7rYm/GkWYVYSpHMt","tlshash":"1ba1136afb69321082ee729ecd4f43cd723c50569102445fbc508ef879e7af94226db4","size":4895,"data":"","first_seen":"2026-04-29T10:34:08.257402Z","last_seen":"2026-04-29T10:34:08.257402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/defer.bundle.js?rev=2993","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3e30cf52f9ad39b1feca2eff0669799","sha1":"c6a40f207a793fb59d970ed2976699b8bea332dd","sha256":"e3d46f13f79063be9d978de30c7890a412e8d8415909e01ebec0a0da9dc11c88","sha512":"4ca6d63d974d8594f9cf9f43797309dadfc28744b33ccc677f140eeee1719693ec77028ce26d41d43e723eab0ba29b5e3b0192f469cbcba271f5a4f3441730ff","ssdeep":"384:ioHswNybzx/hsg4GDNMOeSJtZAHBVKwWicf3lKNQUN4qxwPQtBlSxs4SU39Ov:ioHswNyXx/a6ZOHWiY4QUN4qxCQtBlSo","tlshash":"eea2e98eb15570ba139360b6902f230fa33265396d0a8058757cd8e56d7ed88533bf7e","size":22181,"data":"","first_seen":"2026-04-29T10:34:08.22523Z","last_seen":"2026-04-29T10:34:08.22523Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17798950954\u0026cx=c\u0026gtm=4e64r1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e55e53989de77fde90dadb1e38394115","sha1":"c5ee6088a8e402ca8582856e080691fe9cd9921d","sha256":"3661c2dd3dd51e3f6f70e23e12a150335cc44f85e0345b90b3dc935da1b9fa8f","sha512":"2117196e8f484207fc268d4f7cc42849cff1b5ff5b4511c14abb295e426b20e537b8e9bdb6e90d9110bbbc3362561c6f12a8964393079dc27be8be74b6ad9efe","ssdeep":"6144:jXY72UJEQ2KZWbpN2JktCcqdWDUEOtSZuKaYBJh:87D2Ye2Jk7vJH","tlshash":"619408cdb3d6705253a3b478903f018ba57a79a2b44cc89af185cce42e7469a4277f7c","size":419908,"data":"","first_seen":"2026-04-29T10:34:08.246674Z","last_seen":"2026-04-29T10:34:08.246674Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf996855c9fd7b8549f599b31bddf63","sha1":"ddda728deb9b9b1049b316f3159258d35e3c0bbc","sha256":"c314b79b540466a6874ac3afc8ad73dcbc230299fb0a77e8e0b7415d37676e64","sha512":"15f6f2a6f93258a33e360a3f37867c05ee82676c5b4a2621cee6887eb2a1543047371928e31652669e30d5905e8149fe5d2f7a4e5392f54350e6a418958764b4","ssdeep":"6144:K/ddKIU7hxy5ahtJHaS/cCyoIwne762M3a6jH2Mp3g:SvKIOhPH/cCyRsgBM3a6jWM1g","tlshash":"ae444adcb6e270355212f8b5d43f410ab076aa79f0498cacf694c6f5acb1d890127f7a","size":263727,"data":"","first_seen":"2026-04-23T06:47:59.285016Z","last_seen":"2026-04-29T10:34:08.266209Z","times_seen":629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/_/mss/boq-content-ads-contributor/_/js/k=boq-content-ads-contributor.ContributorServingResponseClientJs.en_US.C31BmpdH3ps.es5.O/d=1/exm=kernel_loader,loader_js_executable/ed=1/rs=AJlcJMwUwDfofeLtlS1A0r_HyqswZx_cPQ/m=cookie_refresh_executable","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a879a1177aeee0425f7909764f93d86e","sha1":"21150698290d73e2aeaa1b5b2525626fb1d6a983","sha256":"52b347af1a601dc56a8e3ba34917a89207a1b997e64eda62624aed87a5d98608","sha512":"e87f25db2e3d1d2efeb1b364703e4415a7a02bc738dacbca2b947ea1dad88a2ea0862e1969b87a5b95af841d53812cd25ef82111a52ad8e7540e97e552af9db3","ssdeep":"","tlshash":"d05177a6756035e64753dd22c41b842d3837b03be009d1be3aabddf488f50075925bf9","size":2658,"data":"","first_seen":"2026-04-29T10:34:08.256497Z","last_seen":"2026-04-29T10:34:08.256497Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9800b151c7807cd744eb765f5b3397e","sha1":"8dbfdffc56ca4283f50403445a68dab3c42912cb","sha256":"f7c90c0435242df0de48d5b8f62113994fae885f5f053b44b614c74428298e18","sha512":"aadabf0fa814ea1417cb5ec2bc665e03122cd20d8d25382e742c66a20a13ede6996a4a567d853743284f65acf8d12fdd3488451583ac20cb2c7c8d9140c1803c","ssdeep":"","tlshash":"9681f125237708398c33b14e4743a98939da206b3e45ca89766e1b4e3fd15b9c6f83dd","size":3858,"data":"","first_seen":"2026-04-29T10:34:08.299789Z","last_seen":"2026-04-29T10:34:08.299789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/mobdesktop.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"47dfbf31468749779b8279db4da4f8bb","sha1":"7f52f88c56a907dc2fbf9f73686488014071464a","sha256":"4dd2b823245ed49b3e264b6617050afa64074c0fcd63676eaef3317a33a548ef","sha512":"8e3158241a8a69948b8c535174d713b0d097c462a2b57f1d78f8c451675a5acb803f7676715e26a298983c754fd15667c5aff7b0e2398a8889678be64d219d39","ssdeep":"","tlshash":"6d418ddffa7462130272348e983fe20db2be5d2964d5a545649907d51ea243ca263f3c","size":2378,"data":"","first_seen":"2026-04-29T10:34:08.231289Z","last_seen":"2026-04-29T10:34:08.231289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7421b8e3e257d17a9e211015611dcc1a","sha1":"ed327f9712f975efd23bc3c9dc1531b7a037e329","sha256":"852fde662bdc3597fe5c9e5978317add799d869b44765778f97c5d00e557cae0","sha512":"839cece6c7c197a5ebdb9e252a05e1162dd9d8453a40d0faa20418997955bffd0822ce977b88c934d64ad8e4f329497e7e543b8777228d97bbd06839c89056fb","ssdeep":"96:TdHZEcuN/a5IyCys2FPIycdSwHlrdtU3yxAfItTaRFLYxXqMsiGsZB2:MjyCycDlrDU3yxAfIU7qH2","tlshash":"7ce13154baf412a30767643f68fa48093a2e503b851acd06bc5e3c854f927747f97bb8","size":7295,"data":"","first_seen":"2026-04-29T10:34:08.301201Z","last_seen":"2026-04-29T10:34:08.301201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c227f64de8c3db093654dc5eab928780","sha1":"8d9c1bda9bb1ccbdc0cf673ee0584ad5a825672c","sha256":"598e35294fc15cbf6783dd5529f651384433b361201645b598850632d0da1780","sha512":"ced2a77d2165dedcc1ab4ac991ec9fb527edc6fa769efe51a2c515206e3bf1338ad771eceea4eebbd2afbece5530ddf83644772c315bd5792ad54d487f707c51","ssdeep":"96:HAJM2x0pdHGEcKaVVmyCy9Ea0IwH0r4tU3yxAfItTaRFCY0XqxFsbXHZi2:HGdOFNyCyCV0rAU3yxAfIUSJY2","tlshash":"9df15358bab422b30767b03f98bb4809372e507b45598d01bd5e2c894f927707fd7ba4","size":7522,"data":"","first_seen":"2026-04-29T10:34:08.302171Z","last_seen":"2026-04-29T10:34:08.302171Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WB94XQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09ae05b96e1433a5bdf621f5bd018c82","sha1":"6b4b9f25d68b2bc1354c472f5e095836ceee2781","sha256":"c5fbd0491c3a890bd00cbb5e9c1bdb3fe609deccc99f078b01caeea101c07e33","sha512":"ca1ec3a325ad123e04bb4ae4a0bd4877f884a6d87ea499ff46f53cd34f45e3dde7ea2d10c449a6068ba3cea066d1317bc451f3ed8641b4232b16d4b4ed438d0e","ssdeep":"6144:lXY72UJER+mZWbpN2JktCc6dWDUEOtS/8KYEEvGOdPWO:a74+0e2JkjRTFEkO","tlshash":"6aa419cdb3d6746253a2f478903f018ba57a28e2b44cc89af185cce42e7459a5273f7d","size":475140,"data":"","first_seen":"2026-04-29T10:34:08.233101Z","last_seen":"2026-04-29T10:34:08.233101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"da53fede397de745f2bc3d73a0f30feb","sha1":"e507d27750b5573df247e0f3d7ac1208eefc4cbe","sha256":"41b714a352e2da4905b7a1fa9c6a7b7dcdcf68b4a61391c10ba3476ece8b94ba","sha512":"e086d280aa30b3d73bee48e5360eb88400a3bb7e5c7a74e8a1f4daac48fdd657efd0e111c94d8e808d139abaf095a6795e30497860bfd4259314caa4a896e6bb","ssdeep":"192:GWx0sYgsw7/+hrkitfhfNR3e3VCQ7CyEL8MysoJ0ILWxh3o+HfG0G1lRBG+tXhlV:Ys5arkChVg3Vdc5jiCb/X4tpt0W","tlshash":"4b62b305b5f241b5213b742f5bff8a002a2a005ba80bcb047c5d5de86fe056da3b5bec","size":15001,"data":"","first_seen":"2026-04-29T10:34:08.303128Z","last_seen":"2026-04-29T10:34:08.303128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/location.js?rev=158840\u0026revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f60a6e912e727cdad7205cb55fe59dc5","sha1":"3fc473a33007ec6f4a1a234dc8f459cce07e6960","sha256":"5aa3ec0f8cb8abdde1e37792ba90438d6a5d39328956658009081d0628da717a","sha512":"44e2992232d0ff422dd116152a09a47c453fea7ca01e964b14533597baa4164591c8ffea9abf78afd6b007ecfde9a0ae802a9a940a9f4b695e5eec5c170078bb","ssdeep":"192:rgMiy2cqYPo4i23wLt05SLruKT24VG2fS2YIG6SBdXqbmubgxqyqU:re0w4i23qt05yPhgdx","tlshash":"9d0231c7f71e250712f730979c5f5146303f56bb580b581aecb981f42ae4a0da727c29","size":8354,"data":"","first_seen":"2026-04-29T10:34:08.232051Z","last_seen":"2026-04-29T10:34:08.232051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4N1Y4SZQNJ\u0026cx=c\u0026gtm=4e64r1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"edd3633ae3669688142cb079ee4f18ea","sha1":"949f198adb48579df67fd96855d2012ef89e3c9d","sha256":"d4f2258c7ad5d09c13e204afc33b2799c9342870ec09822616f5761d530a9f13","sha512":"f25762a6f8ee0e9b3c59dd9de6237f606d020613c0c057407598a3e7e45cb9642ba2d94dbbf45b9778d4720857d4e99b5e4be3c2521b7da7e4474b62b849c5cb","ssdeep":"6144:yksXY72UJEpQ9AZWbpN27ktCcqdWDUEOtSXRKisix8O2:1l76Q9ie27k7Z4r","tlshash":"d1c4f9ceb3d67462529af468943f01cba97b24a2b49cc8abf1c8ccf01d3455a5167f78","size":570032,"data":"","first_seen":"2026-04-29T10:34:08.240624Z","last_seen":"2026-04-29T10:34:08.240624Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://6143c2b4-ae7c-413d-82e7-db4c303cfd6c/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-29T12:35:26.211446Z","times_seen":163820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/customElements.js?rev=1347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d587621c65f3e413d931a36b3ed4767","sha1":"4cad2ee04398ea9c017b9bbde61b0defdd6fb11c","sha256":"5038ac3fee9c61517f876564dd1a4ba862c8f6e982a5653ed9822e777bcb4c44","sha512":"8c936262cb12958a1a114e22543d71767a4bcf7da14790a1949bf1708cb35071fa65c44a95808616985bdf9bc561f9df5f276a38dc9545785133c1c4343f479f","ssdeep":"","tlshash":"5d516d07fbbda36943b53079080e119d343e9166a586098fbcf585e069b0d5ca727e38","size":2794,"data":"","first_seen":"2026-04-29T10:34:08.243315Z","last_seen":"2026-04-29T10:34:08.243315Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"04a0b88b5c5c207abfd75338dcc0e776","sha1":"dfd1a322603e8004bb968adeb6c60991580a768f","sha256":"945bcf5a927abb5530cbdc19eb7165ed0c66728dd44af175bbff5f783bafed0c","sha512":"3a015a588ef96b6c242fa3a3ba0079ca998aaf41482d0da85f28a6e06d19cc20244ef453c5c6a8bd91585c2f139281ed0659edf1f514da7cb02b955a54cf3abf","ssdeep":"","tlshash":"c821acbf4d628675086b605dbfdb96883630115b2205c8303caca9402ff4d296af4b8d","size":1398,"data":"","first_seen":"2026-04-29T10:34:08.304568Z","last_seen":"2026-04-29T10:34:08.304568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f399d2e0c52bb26ff4386dd33f9d8893","sha1":"a246561ea4c5ac3a05da30388f2e7a45c5c03d8f","sha256":"71e4a6dd1420d645315f193e235c03192a375c05a7ee7bcbb2aaed12f3991680","sha512":"ea8360572fd437297bcf6082410268a763b256a0dfc5231ed3f7ae56015407009340bb356cb60a6dcbba4858c3e567e4341ce1bb952bb5ce96149d2b205aa5d2","ssdeep":"","tlshash":"6ef09e191562ad2b0be61845a18ea1952f701c332a2ca180ff48c4cd18d48e69d02c03","size":462,"data":"","first_seen":"2026-04-29T10:34:08.305428Z","last_seen":"2026-04-29T10:34:08.305428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"640921ed3d2ab9fe9d52a113e0302f4c","sha1":"54ebe2b806c3a40f05a1a009db9159e7fdb4458e","sha256":"e7f803e0602ae9d5d901e06d31ae7e0c4993db698fd3e31eba893bf12330144b","sha512":"e41f5d7076d69c04eeda7a9d6635402ec45e2b8f977e63a054ef8fd89337d1f3b38d42498ef56d5d642780b29368528ad00ff386e498a9e727104966daac6765","ssdeep":"","tlshash":"74e07d88de51214865b7e0620ebb4000543e30e70c4881113d0d14540f41706fb6bed4","size":313,"data":"","first_seen":"2026-04-29T10:34:08.306348Z","last_seen":"2026-04-29T10:34:08.306348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/helpers.js?rev=543136","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"353637fe4d73f0be1ba663e021edf6fc","sha1":"fe0c4d38315a33c4fdd4492814201b58dc25f4dd","sha256":"b1049a29ccad0fbddf624349a8c7c16aa87891ae785292ad00c685d307dbb2fe","sha512":"c6380570d7adea7dd97d976b16c80fe7f3940b19b7bf1dc45b2328abe948db0a3982f749e954319761d1f3aee68608b29494d1f75b7817c6cfe06f88227c50fa","ssdeep":"384:/YXFKFnvYa4/EnCF6XBiUySNLE6PhC/cdc:QXAvYazCF6XU336PhCUdc","tlshash":"3aa27249b8f23061143b703e4adfa50836b94417240ece24b99c97e46fe497996b7fec","size":21399,"data":"","first_seen":"2026-04-29T10:34:08.249386Z","last_seen":"2026-04-29T10:34:08.249386Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/geoLocation.js?rev=11056","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"866a64aeecea87e27b497cecc79e1048","sha1":"3570d3738b1e7c6480fea9e6f326d83fdc46dc0b","sha256":"5f62bd0e9b3198e33560858852f8d679ac5711573ba983f714353d7a8d45df78","sha512":"95d202c33e5eda24d347546b0988f56cf141a724254a3000eb32b25d1d342cb22e225ed79fab825c20ae141d105f27784dc77000fa7c6b9894effdab46738010","ssdeep":"384:mYKYMmAHTvIY9eNxM+8hs53afVXc5uGC4zDaaEvsbD0d:vKYMm7Y92xM+8JVXYb7DaaE03U","tlshash":"82927655fbae2436917b32c9584b15cc32bc8037e5018869fdac5568bfe4c2e6359f38","size":19535,"data":"","first_seen":"2026-04-29T10:34:08.263281Z","last_seen":"2026-04-29T10:34:08.263281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/sdk.js#xfbml=1\u0026version=v9.0\u0026appId=441143212575672","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-29T12:35:26.210187Z","times_seen":158569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ae222f4c5f26d98ef11804ab5d866ce","sha1":"ea20f7ceeb8b1389d45e22445253a660d36a50bc","sha256":"575d3080d90db41844b1665f99734551cb8f8eb7011642499503484358a64f4f","sha512":"1f86df8f8c9365157c662326435953fbf0e05ae09f8be6ae057603114a0f6439fe6d57107fafdf55fb777c25322a54c37b4a1016f6933cffb45462eb034d85be","ssdeep":"","tlshash":"5501ac7e5eb785324273b075a27feb50367750072401e9467e4c8dcc5fa1bfa0961b8a","size":698,"data":"","first_seen":"2026-04-29T10:34:08.307895Z","last_seen":"2026-04-29T10:34:08.307895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"949ba1354eac2cf9a9dc438c4498695d","sha1":"1f5b61a506c53884f684686260365d1217cc5993","sha256":"6c22ca0e112d5ff72a1995a8daa83bfeb98d1f492559e2e8dab7f57ce55ddcca","sha512":"7d5802f5b633f048db6ec988eeaf3ce8506a9e85e285f0ab9a3a807eaf59437ce41f934ff00f11521cc888954879a825a93123826a39b4724e2cecd774c79886","ssdeep":"","tlshash":"72014927caa80c7a00ddf3526faa5714159490abe5123c72bfed9c5c1fac81f117539d","size":807,"data":"","first_seen":"2026-04-29T10:34:08.30896Z","last_seen":"2026-04-29T10:34:08.30896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e91273d885205cb2406fa20553ad66e","sha1":"bbb6e9243c66cf39f3c46ad4e65e5ad0eee2ea7d","sha256":"bf997bb5040d80b9b56480c40de40c30807d3cd4ad05f799b250e8032411d1c8","sha512":"5b6dfd3b5685b654da804f11bf893317f5c8d7afa17ad6b822aa07d8e95ccf9c81deca1c4ce258ee39904c2313147968973da9750985784fe03a0b572ea4bb01","ssdeep":"","tlshash":"66d05ee5d6aeebfe884c2a001597ac0412143167e2d010ce7b90ea247582902d8b5c80","size":268,"data":"","first_seen":"2026-04-29T10:34:08.309909Z","last_seen":"2026-04-29T10:34:08.309909Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/search.js?rev=3362","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"36b279bb0626bc468845ea490ac2786f","sha1":"625d7df3b7fbed5c41fb0faf4f2d5b06535870b5","sha256":"2c65a4ac07212bfff7fdfe0ef976a1b70c3bd44b9fe92f6c26130fd188ffaca8","sha512":"5739ca5661a1f3623a08332d70cae627b18fdf4f449fc3c11a98b2909bcdbd29832b50f3b55cd0805f00a5ef04cc580383ed5ec17a9e95b31bfba51a359129ba","ssdeep":"192:3hrQ5nVl++1dXUjFTIBtLbnDpSRezpCJI6CW7iNZYAg:xyDZEJXcDg","tlshash":"28f17686ef9f34ab023330b6bdab334d767c48738903186aacb8568429d4d1d574a936","size":7786,"data":"","first_seen":"2026-04-29T10:34:08.253979Z","last_seen":"2026-04-29T10:34:08.253979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"62e8e3a3a7e469ebd00c850dd7e78f81","sha1":"baf76f59567b3027a1141a31740d19c9bdd25e51","sha256":"281ffb45fd894d2a596b3d50be041ef84b72fadb1e12d3b2c767308f730e491a","sha512":"587e620c40f02696312f879cb659346c0e10f55be15f1cfc31167b544140dd1c1dfe8b5b325edf0c14a721fef58e0b6b8eee3f717c51a5bcde2a2f6a310bd4e6","ssdeep":"","tlshash":"d8c08c02748080a7e0afb8102a8d7a8cdaa302223a41846b3d4c8c802b69bc280506c9","size":154,"data":"","first_seen":"2026-04-29T10:34:08.311178Z","last_seen":"2026-04-29T10:34:08.311178Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 22796\r\nLast-Modified: Thu, 18 Dec 2025 08:05:15 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5bb-590c\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22796,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-29T12:43:00.650813Z","times_seen":18685,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 28864\r\nLast-Modified: Thu, 18 Dec 2025 08:04:38 GMT\r\nConnection: keep-alive\r\nETag: \"6943b596-70c0\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28864,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28864, version 1.0","md5":"4b6dbec2924c348ec965e2ad24ab0f71","sha1":"ca4b40df4c0179bd79b393b176f2d5d19b0f97b4","sha256":"952fba48c212d73793dddc1a4b0589dd8098a335b58babe50dd3e9e03c223c51","sha512":"545845c2a371a1f68dc6ec589d9b87c843099fb8c2e8e1adf1a66cb36538b29969fd3db888e4ea41b011afec0b1959e89f72f8b201c7aedea7a0c9ec0a4b96ac","ssdeep":"768:eTZgucvPHL8H3nJuHrxvedCtA0CueYja6D+LlM2:e+lPr8XJuke6uZWr+2","tlshash":"e2d2f1bf8f08eafaa6efa674958c71f9cc805b3ac904624811133960475c580a7fe4cb","first_seen":"2025-05-29T21:26:20.484128Z","last_seen":"2026-04-29T10:34:08.207627Z","times_seen":4101,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/top.png","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/top.png HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 2008\r\nLast-Modified: Mon, 19 Mar 2018 09:12:24 GMT\r\nConnection: keep-alive\r\nETag: \"5aaf7ef8-7d8\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 69, 8-bit/color RGBA, interlaced","md5":"4971a08419d4ea720b06d57e9cd51c97","sha1":"f34a307fd1414d9b9d7c22aa57758e068e5f4515","sha256":"5d2046a9b53ccb20d836205802965f12ff185e7953de096dce31ac02fe61f9c9","sha512":"fa774fdc80454236264f299830c4881c48812640896e2f389dbb70f19c7279f8966420a22090f75f2562d83dfa82a2ec131f60b692518ed9992cfd1a1df1102d","ssdeep":"","tlshash":"4141c88dfb820c61468dd35654d2c817cd6185c4e694fbe6f8dbe45359303b406197cf","first_seen":"2026-04-29T10:34:08.208404Z","last_seen":"2026-04-29T10:34:08.208404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_1414507aa73c138a5ef770288318ad5c518d25.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_1414507aa73c138a5ef770288318ad5c518d25.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 111722\r\nLast-Modified: Fri, 20 Mar 2026 14:55:16 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd4-1b46a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"33a34ecaaf8f2ac66ce189170c1f3991","sha1":"9271cda69936114884c78f71033f067158fe39fc","sha256":"5d85faddd9fc6721eb721e77a6b869b79e13bae995a75bbf2549258f20dc384d","sha512":"07d7aa6300c41c108828a96f6355311f3fcb71a64149d41dbc519f30f346cd86d4bf7b680f5b5dc24bcecdbfb221496c5207854e72de1b11ed42ad3c53a55449","ssdeep":"3072:q7O7xlZw4rMcsr/dli1HO7QTlT/Wyts9Ob8OMu7R:KOtlZw4Xq/DTu4Ws9Ju","tlshash":"afb31276dfe4794d2c4c11eaa9c2bf76e633841cdc612f721b0455ae3263853a3b64b1","first_seen":"2026-04-29T10:34:08.210155Z","last_seen":"2026-04-29T10:34:08.210155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450b2dd95dd11f3ec5b43ec32faece779e1.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450b2dd95dd11f3ec5b43ec32faece779e1.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 152370\r\nLast-Modified: Fri, 20 Mar 2026 14:55:14 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd2-25332\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152370,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3118894e566b106e462ceb42c1aec232","sha1":"ac59e8db4dee4d1adf6790a85ec767cf2fecf5c2","sha256":"6ea5552761318a9c27d6fdc785ecdba186d3150a5721bf77e3e0cab557d87b5f","sha512":"18b9e3ea6846c0386d627c7637e8df4d47fd7f54f3d486834601156cf39b7a593d2e4f655701d5a9118e91b5e59376ac0cd071a3486c76d7dd3eaad311d51780","ssdeep":"3072:CwuxukK8JFyDM/+GWmlFbMxZJ3LyqSvCHUpKJABOqctFRK2xTRI5c:CbPyQ/+wlFkLyqj0IGBKvVH","tlshash":"e2e3236c40083a3bd23df1cea6a76229539052eecb5ade8dd49c345b01dfd1fd2aa845","first_seen":"2026-04-29T10:34:08.211426Z","last_seen":"2026-04-29T10:34:08.211426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1628,"timings":{"blocked":310,"dns":1,"connect":34,"send":0,"wait":942,"receive":213,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 20408\r\nLast-Modified: Thu, 18 Dec 2025 08:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5cd-4fb8\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20408,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-29T10:34:08.212561Z","times_seen":56973,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/photoswipe/default-skin/default-skin.css?revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /photoswipe/default-skin/default-skin.css?revb=1705 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11602,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"797653848cd0b79901f084ad7737f357","sha1":"acaaa6356a6bba6d374d49cee70c0e7802c222ed","sha256":"c89938b6551dd424a5e4bbaa34411f4f4b6be1f65614fdabc5bbd3d5dd3bf7ac","sha512":"31da29fc992d6ceefda8ee6227947b0a43adb5b1e5902af1593e3a9d05c5f6a182860e7b50e9047df5d8c1d7e73a7b09892d5145a8b34f510b04a57a8910e81f","ssdeep":"192:MyBYNTeJeYSUihIZeBqQtbzwGxsxxxqLexPxr3xGNVgCggVrJVr6KqmWU7j:MY+Te8bFxsxxxqLexPxr3xGNkVmWs","tlshash":"223250f786a402083507d356e2dbb714237510277906bc68b6be306edf85bac895f763","first_seen":"2026-04-29T10:34:08.213208Z","last_seen":"2026-04-29T10:34:08.213208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/calendar.png","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/calendar.png HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 2246\r\nLast-Modified: Thu, 28 Jul 2016 08:23:06 GMT\r\nConnection: keep-alive\r\nETag: \"5799c0ea-8c6\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 44, 8-bit/color RGBA, non-interlaced","md5":"13a88704f9f9ec635d08468162ada46d","sha1":"e6a89e089ed3dc1203049de0bbd2b6d73d83a165","sha256":"020f8334c6480e11eedaaf3c3175879f4e6e7f454675eeb29cf59f2d756420a0","sha512":"0be8bddca0e12fff39f5e15f56ab0887ae4da5b53153a11d530ce6b2854bc1d64ffde7144e6fbacac7e7727383de7b67f71ef628855acf8d69b07950b4bc09ff","ssdeep":"","tlshash":"2f4109807151788ab9ab9a4401dbac335a139e40d6dcc0c7794d44928ea02ffc6af9f7","first_seen":"2026-04-29T10:34:08.214542Z","last_seen":"2026-04-29T10:34:08.214542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/g-logo.png","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/g-logo.png HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 1771\r\nLast-Modified: Tue, 18 Jun 2019 13:54:32 GMT\r\nConnection: keep-alive\r\nETag: \"5d08ed18-6eb\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced","md5":"0f118259ce403274f407f5e982e681c3","sha1":"9b4f18d289956961f1421aa7de531ec5ee1eecd5","sha256":"658379fc62a45175942e4be8db35d063a700ffc4d5bedb98a4d8ff135d24b7df","sha512":"2aaf004f53b633cde30dcd4c4798a0dbade5866559ac546c36ee0d92f8b823d5f60be9aedad3dff015bf5f393a10992384c24b6bbe82b3b8ae42bc497f21f8bf","ssdeep":"","tlshash":"7b31e9ee23267a1d17a657f2624410a43637b3e42a055318db749f8b336b108d95bb44","first_seen":"2023-06-05T09:19:22Z","last_seen":"2026-04-29T10:34:08.215671Z","times_seen":77,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/image-placeholder.jpg","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/image-placeholder.jpg HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2369\r\nLast-Modified: Fri, 19 Jan 2018 10:36:05 GMT\r\nConnection: keep-alive\r\nETag: \"5a61ca15-941\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2369,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 90x90, components 3","md5":"ca16144b35d51ec32568f1aca7b52e64","sha1":"d8e68447fb34c6dc6f98eb1cd566d3ebe7db288b","sha256":"fcc66473ec5600fb6cadd74d8a7bc64441d56e28d8674ce1b9d446599cf20487","sha512":"386baf45396ec9ba47cf13fb392d9e796b28a61b9c0845b89265ac99a9674c1b7dfa90fc93abb28847a1c24d8c30a5c3fe4c78c233f3dad519aeee5de80b53bf","ssdeep":"","tlshash":"7641ca0aff0374d1f490677407e25c5be7f10990e9d0d90138ca8c561c1a1b15a9b6db","first_seen":"2026-04-29T10:34:08.21612Z","last_seen":"2026-04-29T10:34:08.21612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 22796\r\nLast-Modified: Thu, 18 Dec 2025 08:05:15 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5bb-590c\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22796,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-29T12:43:00.650813Z","times_seen":18685,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450996a059029cb56bcff8473f14a16b6aa.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:36.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450996a059029cb56bcff8473f14a16b6aa.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 49774\r\nLast-Modified: Fri, 20 Mar 2026 14:55:11 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fcf-c26e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6e7fd5d1282bb15925936febf2d15bfe","sha1":"aac97af70e998e54ba6b9125a0f8569b3b0c1ca9","sha256":"5f262874f8b1178a21a4e4612a48acf4361f40ddc2759944a235a9e7a4e5f7a1","sha512":"41394d462c7d6b8dfb15a681a1c80edc68c75a2bcffdf49616cd65a12215cca03a6b1190fd3d5069ab3bf7e54bbd2166b59650c4b54ec238926bde6ef77f7727","ssdeep":"1536:yDOZut9RnvcJjis6P/YuIhTdp+BiWlaEmk:K8ITna6P/WhH+/sEj","tlshash":"4b23f17fc6bfe6e200696bc38c013ac85fcab07917f82a30268887551e9d6d755c5e1b","first_seen":"2026-04-29T10:34:08.217117Z","last_seen":"2026-04-29T10:34:08.217117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 40128\r\nLast-Modified: Thu, 18 Dec 2025 08:05:49 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5dd-9cc0\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-29T12:35:16.061503Z","times_seen":772244,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":34,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 22796\r\nLast-Modified: Thu, 18 Dec 2025 08:05:15 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5bb-590c\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22796,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-29T12:43:00.650813Z","times_seen":18685,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/css/styles.merge.min.css?rev=2438","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /css/styles.merge.min.css?rev=2438 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":716376,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"87c1d93c08967175dcec4053925b1d1c","sha1":"2810e9ecb2ee383aa00d9405d666ebe3366f273c","sha256":"0838a3c55c9720af6bc33397d79e6437f216aa020a18f90aeb88a52189096b59","sha512":"ba136cb136c8b40e22d9126786bf2ee0a075a620dc14de947623866d55316afae056aeb5d8b095bd883337c8b827d0ab9a1cb0b5b6076de677354bf8f7811f08","ssdeep":"12288:eNwC39vGQ1UZSSALCErbMi36FyfAcprpHEBv5DqKyJ7a5H6N0JesLUm+cstDgTcs:QwC35J1UZSSALCErbMi36FyfAcprpHED","tlshash":"b8e4c831d995206db377c26bb5c277ac3238c116e3130db9f629662ccac71aa12f3759","first_seen":"2026-04-29T10:34:08.218794Z","last_seen":"2026-04-29T10:34:08.218794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 40128\r\nLast-Modified: Thu, 18 Dec 2025 08:05:49 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5dd-9cc0\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-29T12:35:16.061503Z","times_seen":772244,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":35,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 51412\r\nLast-Modified: Thu, 18 Dec 2025 08:05:07 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5b3-c8d4\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51412,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 51412, version 1.0","md5":"9e5e97447fcc00eca79e97de3b337831","sha1":"efafc4ef0f1ac7fefb6e22be4ea9c681a53d415a","sha256":"8d230115e58faa2ed303bee567b91d1a792e0c958a0118998b53648b2ab7c057","sha512":"ff66693e0a9dfcf51c16540c713de433c308e0b4afb31b48aab7fc7b46684e24494468826219fcd82e0cb26a40ec4addb8db741553e66e496d6cb1d7c9513055","ssdeep":"768:18/PyhTHe3I1xDq5OqDPcdn9jxYzJ2LEWPf4FPkEsSfR7vpNfyB4dnzoQub:rr1HAcnlxwJ2LJwFfHuyNub","tlshash":"ac3302a818f688a9d57e19446f2b0d908566123731a2037bcb524f8b12e96e332ddb77","first_seen":"2025-05-29T18:08:33.81349Z","last_seen":"2026-04-29T12:29:09.817821Z","times_seen":21444,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_1414500a6db4fea69982e294b951b61fe6c654.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:36.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_1414500a6db4fea69982e294b951b61fe6c654.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 46164\r\nLast-Modified: Fri, 20 Mar 2026 14:55:17 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd5-b454\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46164,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9fc00c0d040390446771729a5c0ff0ae","sha1":"18d1e2b9e6c3de21be07be34f0724516b37693c9","sha256":"5c15c809f10e7ef982d8d8f851096173c000dba7b926441579936cffd4ca8cad","sha512":"4f2492c0a7dce484d864ad8255b852b30b1861622cb5e91167838e24e31a7ccc7b4455ceeb5d6a0a8915e161d4559f871f6dd85a4b63dfbab2d90784e82a65cb","ssdeep":"768:jHxv4ny2XIXhbIhWAFQrtXQOf7clunGCb36JI5Ig5Izj+CHr+04HN:jRv4shbe8tX3PGC7VP5w+CHa1N","tlshash":"4323f24db56816533b80ba2a03c6147f36905e56308fa49fca9dcd70b6df230b5ee069","first_seen":"2026-04-29T10:34:08.221215Z","last_seen":"2026-04-29T10:34:08.221215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/el/AGSKWxXoVzNPCKL5-9ME7jgGw7FCrxmIaKBEvG8UbsUWWUBeMEdelZU0OipuY76zlDL5AsUVt4R9JTRbc9XJJ7Xd5gJrBxKUXToBd4bKD3juz4x1jew5AloUnmgHYiSm5HNGW_hSfH1W4Q==","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:37.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /el/AGSKWxXoVzNPCKL5-9ME7jgGw7FCrxmIaKBEvG8UbsUWWUBeMEdelZU0OipuY76zlDL5AsUVt4R9JTRbc9XJJ7Xd5gJrBxKUXToBd4bKD3juz4x1jew5AloUnmgHYiSm5HNGW_hSfH1W4Q== HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nContent-Type: text/plain\r\nContent-Length: 140\r\nOrigin: https://rio.bg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"[null,null,null,null,null,null,null,null,1777458816000,null,null,null,null,null,null,null,null,null,null,null,[[1,156,\"rio.bg\",\"rio.bg\",1]]]"}},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: https://rio.bg\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 29 Apr 2026 10:33:37 GMT\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-o73kT4cFsZZ7cs8NAa5OFA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/ContributorLoggingHttp/web-reports?context=eJzjMtDikmII1JBi-FB_mfUHEIdz-bDFA_HCaYFsK4H4TkwQ2xMgPrU6mO0SEAtxczTuPX6eTWBB55kSJZek_ML45Py8ktS8Et3ElGJdELsoM6m0JL8IhZ1aBlKRk5-enpmXHm9kYGRmYGJkpmdgHl9gAABePS-r\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T12:35:16.046159Z","times_seen":14375289,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/bulgaria-map.webp","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/bulgaria-map.webp HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2560\r\nLast-Modified: Fri, 13 Mar 2026 08:42:41 GMT\r\nConnection: keep-alive\r\nETag: \"69b3ce01-a00\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8908c6d3551acece12cbc4225718166","sha1":"d776508503881d0e8fbec9e022c931ee6d0d5bce","sha256":"89e6b2f2fbf0a9c853db68c9704138e2c1782a27f751aba21916527744b0836d","sha512":"50f3faee9a4e7d76f2c182317200f6b2c03e9706b114f13e027843c9626a59d8951fe91f6c3fdea099a917bfa88ff8ce1d26789fad897cf25f59504adbe6cd4c","ssdeep":"","tlshash":"50511a8ee9237441608ce25335fe003bab461894afc8de55159dc3d31dfa1f5552e6cb","first_seen":"2026-04-29T10:34:08.222666Z","last_seen":"2026-04-29T10:34:08.222666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/reservation.js?rev=2340","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/reservation.js?rev=2340 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6174,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9589bb4e5c279b0cee72887dd3620673","sha1":"173a8ad635f137b95a3c07699f2ec89ac7767466","sha256":"baffa41f8072829eb8e9ad173d0632e09c1a02e9b798c3f2d0a2e90c9767ad3d","sha512":"b92c326b5dfa4d8ead1dfa8b055f8d2e6148c375d959ecbe95d4de9215025d06b2041fed50c5d5ec2afb46e54dfe69f2b31836ac819f5634fdd639defab722c1","ssdeep":"192:fLbj5gGlM55Z88ZUeGNAsKqmYQY7PGGlg3o0:Tbj6wq5Z88ZUFNdQYqGlg3l","tlshash":"d7d10048fbec7359813b30a64c6e90ce333d5125554158bffd6891e418e0d296bbbeb8","first_seen":"2026-04-29T10:34:08.223493Z","last_seen":"2026-04-29T10:34:08.223493Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450b3bb793b4cae1ed320f44f4843462607.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450b3bb793b4cae1ed320f44f4843462607.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 92316\r\nLast-Modified: Fri, 20 Mar 2026 14:55:10 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fce-1689c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8fbd33eaaa17895ee969cc00af5a5f78","sha1":"a96aec1a662501da41752c86c69a06bad33c8337","sha256":"9f57ca09fa4d8d8d620ea26755c08e68aa37e26a6be4454135cd8bc74b253864","sha512":"f31c845515aaa1661f38e4b0dcffc40f704c24c670fe59659f7878ac58d2c470e2074fb78ae2f1c7b326d3b70a10075eb7e7dad7926f755e451834dbbb7ce8b9","ssdeep":"1536:x2RauOMR1LlQrvMaq76EsrDQc523R7jWuJrlok+RJVFHvQYYKE82jAC:x20uHDppY2hjWuQzVJvQYYh8qAC","tlshash":"4c931209c0b72b37be894a3b685da67461bcb2dd3b9d32f757e0bf590e46064953c090","first_seen":"2026-04-29T10:34:08.224386Z","last_seen":"2026-04-29T10:34:08.224386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/defer.bundle.js?rev=2993","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/defer.bundle.js?rev=2993 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22392,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21834)","md5":"d3e30cf52f9ad39b1feca2eff0669799","sha1":"c6a40f207a793fb59d970ed2976699b8bea332dd","sha256":"e3d46f13f79063be9d978de30c7890a412e8d8415909e01ebec0a0da9dc11c88","sha512":"4ca6d63d974d8594f9cf9f43797309dadfc28744b33ccc677f140eeee1719693ec77028ce26d41d43e723eab0ba29b5e3b0192f469cbcba271f5a4f3441730ff","ssdeep":"384:ioHswNybzx/hsg4GDNMOeSJtZAHBVKwWicf3lKNQUN4qxwPQtBlSxs4SU39Ov:ioHswNyXx/a6ZOHWiY4QUN4qxCQtBlSo","tlshash":"eea2e98eb15570ba139360b6902f230fa33265396d0a8058757cd8e56d7ed88533bf7e","first_seen":"2026-04-29T10:34:08.22523Z","last_seen":"2026-04-29T10:34:08.22523Z","times_seen":1,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":88,"dns":0,"connect":36,"send":0,"wait":74,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/448x253_2_141450fbd3d3a44aaf90ad5f3bf98b0a5aba45.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/448x253_2_141450fbd3d3a44aaf90ad5f3bf98b0a5aba45.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 33414\r\nLast-Modified: Fri, 20 Mar 2026 14:53:13 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5f59-8286\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x340, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"02e437687d3d7e8cb250e6da12fc6c65","sha1":"be51b492f9f7df8a7c7d1b7a14caf2c691998d19","sha256":"c070524d5fd5e408bd2a754d9a2b812afeed38f817a71631bca7e11eef461a47","sha512":"87255dd0772c2f72ac7d92b5a77c87cdd8c30e3bb344d129a6aef8b58b47735afdd64d690fa49fc611399ca0732ce49df782f81c12be8ee4f929260129ca40ba","ssdeep":"768:/OvLs/LdeZsRMYjqbdr1VRLGvbx2XwBKSbaUWaR0rQJe8H4bNAZ4rH:2vLkWsXEC1YxUW6/M","tlshash":"31e202c5d1af4ceed3a170cd14e551e22b3c49a47a1407997e0a30b5be5c1f1fd3a4a6","first_seen":"2026-04-29T10:34:08.226383Z","last_seen":"2026-04-29T10:34:08.226383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1572,"timings":{"blocked":317,"dns":63,"connect":36,"send":0,"wait":716,"receive":180,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/bg-body.webp","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/bg-body.webp HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6428\r\nLast-Modified: Tue, 29 Apr 2025 13:34:36 GMT\r\nConnection: keep-alive\r\nETag: \"6810d56c-191c\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x270, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2e76a626030cd72ea2b69b652e502809","sha1":"9a81485855d671c5ef53239f6fd287358d1ea45e","sha256":"7f43a7e61938187ae1c3d9e1daa5f1dbab0669c641326b66b368ad67c0386cdf","sha512":"fb8dd0690486b48e44947714d35dd4b656fa96fbbe0f0259a78532ab62edf3883e1e95e6053579c36f033fd5f6ca61f8330a890437b832f352c44f31fb31e5ac","ssdeep":"192:J03p9qA2z7sPhhwifbbIcsHI+mKkiSU4Qhtr6E:J03pozXsTDgcX+m24a6E","tlshash":"7fd18f4c68d546051db1f234b2a6fd5b3f31edf20a556418de17af24fb4426104d6f1e","first_seen":"2026-04-29T10:34:08.227317Z","last_seen":"2026-04-29T10:34:08.227317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450e2dc512ba38589ab9d39c18d9a86afc0.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:36.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450e2dc512ba38589ab9d39c18d9a86afc0.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 85964\r\nLast-Modified: Fri, 20 Mar 2026 14:55:13 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd1-14fcc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"00ec6a7c1e57870e44b3198a0aa605f1","sha1":"47aedba37d9b7086ce74881a7e038133c6231dae","sha256":"c8f3bff27416ef85d7a5f856cd80e5cb51757638f28ce2f98dd16a1565cf0922","sha512":"cdb11348f0c989af4e705895c7fcf9da9fb0ad210997fd9bfc95e2f6c3bf26aa7d4071070d7479b246df32792e0481699e9ceb3fb808059a4397674a1a458f45","ssdeep":"1536:K3OMgoo7c/R1nnW6Q9XlVBK3QulatxexiPjKM3uL1/wGfI7Loq+N7FaL5iPbMs:Kex7WRonDrOSiiLKT1/wGfKoq+NM5iQs","tlshash":"178312ab28fe0add1f678911a8857921cd7e5e81c8f2021356d21c7a093df6d2dc8bd5","first_seen":"2026-04-29T10:34:08.228223Z","last_seen":"2026-04-29T10:34:08.228223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/offers/d3bada1f31e0b796c081eeef559227b2/4522221-t.webp","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/offers/d3bada1f31e0b796c081eeef559227b2/4522221-t.webp HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10824\r\nLast-Modified: Mon, 23 Mar 2026 22:00:52 GMT\r\nConnection: keep-alive\r\nETag: \"69c1b814-2a48\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x153, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4422f6b4cbf24e1a4a3638bec9ef1744","sha1":"601f403db79451d98e9ba2c1462daa9f99653679","sha256":"edc088da37b2758a559d97a2aa0b18675bef669ddba1078c44ff66eb5bcbc1f8","sha512":"b933db325e1d45b28d5b5637e28d9a3a2bd38c41ce7b38be8daa025ead66d1fd8a84556aef206b9e32218f9863bc5a3bacad83e39c6bb18d80364940eb013375","ssdeep":"192:pudjzMlsrzL9lDrBxsvV3SLujF/z4fGf1KKiGHjPpMrW:odnMav7Dtqf/EfsZtDRMC","tlshash":"6a22bfa125066fe7841fff83ed12028aea07309577a81040b8e757deced37a604edca1","first_seen":"2026-04-29T10:34:08.229073Z","last_seen":"2026-04-29T10:34:08.229073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":317,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 77160\r\nLast-Modified: Mon, 29 May 2017 09:25:02 GMT\r\nConnection: keep-alive\r\nETag: \"592be8ee-12d68\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-29T12:35:05.771481Z","times_seen":444071,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 51412\r\nLast-Modified: Thu, 18 Dec 2025 08:05:07 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5b3-c8d4\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51412,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 51412, version 1.0","md5":"9e5e97447fcc00eca79e97de3b337831","sha1":"efafc4ef0f1ac7fefb6e22be4ea9c681a53d415a","sha256":"8d230115e58faa2ed303bee567b91d1a792e0c958a0118998b53648b2ab7c057","sha512":"ff66693e0a9dfcf51c16540c713de433c308e0b4afb31b48aab7fc7b46684e24494468826219fcd82e0cb26a40ec4addb8db741553e66e496d6cb1d7c9513055","ssdeep":"768:18/PyhTHe3I1xDq5OqDPcdn9jxYzJ2LEWPf4FPkEsSfR7vpNfyB4dnzoQub:rr1HAcnlxwJ2LJwFfHuyNub","tlshash":"ac3302a818f688a9d57e19446f2b0d908566123731a2037bcb524f8b12e96e332ddb77","first_seen":"2025-05-29T18:08:33.81349Z","last_seen":"2026-04-29T12:29:09.817821Z","times_seen":21444,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 22796\r\nLast-Modified: Thu, 18 Dec 2025 08:05:15 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5bb-590c\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22796,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-29T12:43:00.650813Z","times_seen":18685,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/el/AGSKWxXoVzNPCKL5-9ME7jgGw7FCrxmIaKBEvG8UbsUWWUBeMEdelZU0OipuY76zlDL5AsUVt4R9JTRbc9XJJ7Xd5gJrBxKUXToBd4bKD3juz4x1jew5AloUnmgHYiSm5HNGW_hSfH1W4Q==","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:37.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /el/AGSKWxXoVzNPCKL5-9ME7jgGw7FCrxmIaKBEvG8UbsUWWUBeMEdelZU0OipuY76zlDL5AsUVt4R9JTRbc9XJJ7Xd5gJrBxKUXToBd4bKD3juz4x1jew5AloUnmgHYiSm5HNGW_hSfH1W4Q== HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nContent-Type: text/plain\r\nContent-Length: 183\r\nOrigin: https://rio.bg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":183,"data":"[null,null,null,null,null,null,null,null,1777458815997,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,[null,null,[3648955472458380]]]"}},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: https://rio.bg\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 29 Apr 2026 10:33:37 GMT\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport, script-src 'nonce-JwKamcetynKyDWdJ1KHDLg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/ContributorLoggingHttp/web-reports?context=eJzjMtDikmLw1JBi-FB_mfUHEIdz-bDFA_HCaYFsK4H4TkwQ2xMgPrU6mO0SEAtxczTuPX6eTWDC3WklSi5J-YXxyfl5Jal5JbqJKcW6IHZRZlJpSX4RCju1DKQiJz89PTMvPd7IwMjMwMTITM_APL7AAABeaS-x\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T12:35:16.046159Z","times_seen":14375289,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/448x253_2_141450e29319c6f1f070f7502d50b62af0a07a.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:41.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/448x253_2_141450e29319c6f1f070f7502d50b62af0a07a.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 44358\r\nLast-Modified: Fri, 20 Mar 2026 14:53:12 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5f58-ad46\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x340, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23df95f51e0e3f2cb451c78cbe5078df","sha1":"cda15bcee10b7915406848793664d828925b1d12","sha256":"dddb4252906c5c23a65eaaf17058221e0eacdb16bb5054d2c4ec9f14aa4ed016","sha512":"41e76ac09a6cb404120ea824625a22afa55f553222fb7a320d6a1ce89cb5099576fa369d425f47077325a90ecdc5bd50e894f1bef558d39d4f3b1e07567c3cbc","ssdeep":"768:4CdXPSoHNQfImr5ud02oKWd7l57HObUC66lY/K55Yi/N4YCe9BbhrD1rPV:4CJPN7mtaZ83HGU8mCvBdr5PV","tlshash":"901302740708cc3d0c8e3c1a3588aad27e576e51312d75ce2e8724fe9516b2e56ef20e","first_seen":"2026-04-29T10:34:08.230449Z","last_seen":"2026-04-29T10:34:08.230449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/mobdesktop.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/mobdesktop.js HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2378,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"47dfbf31468749779b8279db4da4f8bb","sha1":"7f52f88c56a907dc2fbf9f73686488014071464a","sha256":"4dd2b823245ed49b3e264b6617050afa64074c0fcd63676eaef3317a33a548ef","sha512":"8e3158241a8a69948b8c535174d713b0d097c462a2b57f1d78f8c451675a5acb803f7676715e26a298983c754fd15667c5aff7b0e2398a8889678be64d219d39","ssdeep":"","tlshash":"6d418ddffa7462130272348e983fe20db2be5d2964d5a545649907d51ea243ca263f3c","first_seen":"2026-04-29T10:34:08.231289Z","last_seen":"2026-04-29T10:34:08.231289Z","times_seen":1,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/location.js?rev=158840\u0026revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/location.js?rev=158840\u0026revb=1705 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8354,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (338)","md5":"f60a6e912e727cdad7205cb55fe59dc5","sha1":"3fc473a33007ec6f4a1a234dc8f459cce07e6960","sha256":"5aa3ec0f8cb8abdde1e37792ba90438d6a5d39328956658009081d0628da717a","sha512":"44e2992232d0ff422dd116152a09a47c453fea7ca01e964b14533597baa4164591c8ffea9abf78afd6b007ecfde9a0ae802a9a940a9f4b695e5eec5c170078bb","ssdeep":"192:rgMiy2cqYPo4i23wLt05SLruKT24VG2fS2YIG6SBdXqbmubgxqyqU:re0w4i23qt05yPhgdx","tlshash":"9d0231c7f71e250712f730979c5f5146303f56bb580b581aecb981f42ae4a0da727c29","first_seen":"2026-04-29T10:34:08.232051Z","last_seen":"2026-04-29T10:34:08.232051Z","times_seen":1,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WB94XQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:14 GMT","end":"Mon, 22 Jun 2026 08:35:13 GMT"},"fingerprint":{"sha1":"BA:9E:A9:01:73:30:25:9B:9B:28:25:39:24:13:22:55:3E:F0:57:C3","sha256":"9D:AB:4E:BD:B4:98:3A:1E:70:9C:42:A2:E1:DA:0E:18:3C:BB:D8:2A:58:08:F5:85:3D:36:0E:1A:7A:27:AC:5E"}}},"request":{"raw":"GET /gtm.js?id=GTM-WB94XQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 29 Apr 2026 10:33:34 GMT\r\nexpires: Wed, 29 Apr 2026 10:33:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 29 Apr 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158156\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475140,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9704)","md5":"09ae05b96e1433a5bdf621f5bd018c82","sha1":"6b4b9f25d68b2bc1354c472f5e095836ceee2781","sha256":"c5fbd0491c3a890bd00cbb5e9c1bdb3fe609deccc99f078b01caeea101c07e33","sha512":"ca1ec3a325ad123e04bb4ae4a0bd4877f884a6d87ea499ff46f53cd34f45e3dde7ea2d10c449a6068ba3cea066d1317bc451f3ed8641b4232b16d4b4ed438d0e","ssdeep":"6144:lXY72UJER+mZWbpN2JktCc6dWDUEOtS/8KYEEvGOdPWO:a74+0e2JkjRTFEkO","tlshash":"6aa419cdb3d6746253a2f478903f018ba57a28e2b44cc89af185cce42e7459a5273f7d","first_seen":"2026-04-29T10:34:08.233101Z","last_seen":"2026-04-29T10:34:08.233101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":134,"dns":30,"connect":15,"send":0,"wait":59,"receive":50,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/jquery-and-custom-scripts.bundle.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/jquery-and-custom-scripts.bundle.js HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":380447,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31985)","md5":"c5939873a660b1e61c1115739a4912f9","sha1":"491a84c7ccc5db81b4c70f3765ff5eee7adfb41b","sha256":"9223606b3a3428abb25460bb3ff827329bcd7c5b6b81608f913a2f0df8eb8c0c","sha512":"238756d613a8ac02b536664d12d64474ba4950b2b227f836dfe9b8ff3a35cc6833da96fd868ee1f56a25b063ef37a44f54fc89e52ba12062bbe01d883e4e0747","ssdeep":"6144:4+Etc2ISE/p1YOfmnhx8rsJ0gHy6LobQcLwOr:DmlISo1YOf2hxiwLobQcLwOr","tlshash":"2084088db241752282eba1a8102f160fb237655da605809cb13dcdeead7ce48717bf7d","first_seen":"2026-04-29T10:34:08.233953Z","last_seen":"2026-04-29T10:34:08.233953Z","times_seen":1,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":81,"dns":1,"connect":34,"send":0,"wait":77,"receive":170,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450a7319f94957e8116ef39e7371fcc75ca.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:36.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450a7319f94957e8116ef39e7371fcc75ca.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 70900\r\nLast-Modified: Fri, 20 Mar 2026 14:55:14 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd2-114f4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"187c17d8245f257eef5be61a7abfe60c","sha1":"c43ad1f4b8165e9524f878854750c6cde8be9b5d","sha256":"56ec762688aed8688ea63376b05ae9ade28979ddf2943e7ebacc9aa015c8308a","sha512":"43799cbf65afc279c7a0613f0be6465cffd53404fb57a3fe63ee6d96edc542f812b8e2591c46348144502eb06134590c2bf0674e14d16fbefb613dee783d3a64","ssdeep":"1536:UdK+q7BiFI0XfJaVsYWAggjvx+6L7jBCCjYkXBA3rMgqet9aHt:Ujq7EFIfOtAgg5N/X44ga","tlshash":"3463021a02d430852ceb97ea690dae8ded8c588d438f1a18d57d37e4de58b3d34da1dc","first_seen":"2026-04-29T10:34:08.234831Z","last_seen":"2026-04-29T10:34:08.234831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/448x253_2_14145059b474ae15cc3c620a43b6ea3af779f6.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:38.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/448x253_2_14145059b474ae15cc3c620a43b6ea3af779f6.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:38 GMT\r\nContent-Type: image/webp\r\nContent-Length: 44300\r\nLast-Modified: Fri, 20 Mar 2026 14:53:14 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5f5a-ad0c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x340, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba616fb2c1624547bcc231b7f67da2ee","sha1":"ece7e89c859d11c6fd2558edc2fd3f14c980a701","sha256":"f71d1368f48269f872a080739bdead50555373ced9f985bf709906a110f49e35","sha512":"783ca554ecb6c6baea816bf0e9fa2b9ff3e4a9c806defc007c8dfbaab36f0bde251f6f7308c576d82ff0fa4aeb05e5cce17cab69060ff2361b93939f09a601f7","ssdeep":"768:SkWtUhYx/IjCvl5oHLZ8G2QI6nCS/wJuRD6Bu2UIJqA4bZL0WG2740tzpSpnZWMM:Tm9NyHNN2/Yl6Butflgp2740nSpZvkr","tlshash":"a41302f402bcd2e6e71e64a47b84d0c5622fbbdf26782471a42c0989d1c6e7423b757e","first_seen":"2026-04-29T10:34:08.235901Z","last_seen":"2026-04-29T10:34:08.235901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/448x253_2_141450fb301e7b2cbbf2086ca0237992c1e957.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/448x253_2_141450fb301e7b2cbbf2086ca0237992c1e957.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47786\r\nLast-Modified: Fri, 20 Mar 2026 14:53:15 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5f5b-baaa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47786,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x340, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dadf7322bed7f3c9287e2b82c945b609","sha1":"7a964c7435baf033a7b473a6150963e4ad0e4c48","sha256":"36f6a3695eeda9d8554fb9ebc68f75f6617f209872d0a179ade3cb0cde1829ed","sha512":"99c2ac8d7c9bb9498d9e230e396869c099b449251bf0182f44ac16ae957674bd619723444d91942afe763f19d2fb58926f2cf80cd41c9d21137ae59ad82b61bd","ssdeep":"768:LWctMu8PwfGHTx/18ED18GMsn8BsTkk9S9yUoL8hlTCzuD482ADd1QnB6eypDowR:6Zwu1/1Doa8B7kjO9CCD4MjQB8pDowtj","tlshash":"632302b05cd7b031585d663f5c33aaeace940b0269bc526539f0ac6f6e39c5aee040c6","first_seen":"2026-04-29T10:34:08.236675Z","last_seen":"2026-04-29T10:34:08.236675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1532,"timings":{"blocked":318,"dns":1,"connect":43,"send":0,"wait":950,"receive":74,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/offers/01e70a0d695cd19b9e35867aed1cad6a/4541427-t.webp","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/offers/01e70a0d695cd19b9e35867aed1cad6a/4541427-t.webp HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10496\r\nLast-Modified: Tue, 28 Apr 2026 21:00:32 GMT\r\nConnection: keep-alive\r\nETag: \"69f11ff0-2900\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x153, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d61b1319cf956f8bf31da339391808db","sha1":"c92dd13510377fe3691337a931cee1c61bb8da04","sha256":"9c3f11dd5a3e18ae7fda502b49d596cd015444d66911caf4fbd5210a1471a8bc","sha512":"536c3999839a42702a33d5cfc9415e97c82587a2c9e8a04c367223ef577d86eb238183fff3fb785fbcd1a79624be26f8197ba155946c0f70bf34f2fc0fecf469","ssdeep":"192:qG0ezq7b7U8In8sTOjZ7t0daygIXcdTUGfdyDsQy5kXVkxWf+p8zx74/i4ETi:qqqHU8Y88ilt0EIX8f5QMk6xWf++x71Q","tlshash":"2322cfa4e9d2774ce3c2a1f9513da3d6a005ca4180cae30e419883ce1a4ff378bd6cb5","first_seen":"2026-04-29T10:34:08.237589Z","last_seen":"2026-04-29T10:34:08.237589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":314,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450aed887a970177ea79729680aa1880c27.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:36.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450aed887a970177ea79729680aa1880c27.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 95996\r\nLast-Modified: Fri, 20 Mar 2026 14:55:16 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd4-176fc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dbf0effe7f9b38d0bff684438eb3f448","sha1":"f3cbf9832ea8367a0da408172020ce5bb6e8c59f","sha256":"44d62b1140e8fd2b8d4debd2dde34e1036996dedf554df31b01889410de0bcbb","sha512":"0ed943df49377fa47e7b0b7fddacad4438f389912158dc5586d31a59bf4dfbe2821a5fd33bdf653688b465e04bd46ad6e686f67f4538427a0b8e1a16353dc0ca","ssdeep":"1536:oPpBFurQAcP1V8kJAeksmp5Ih+IbG5PKwzFPMgjbg4VGtuxTLfhqUGUDfkfkKzJL:oPXPnlZh+Icz+8bjnx/ZrGU/K1MLjqWC","tlshash":"259302c297749ffcceaa401194722ab35b0cdb9c415d94ed20e4396dafa53f0a88934f","first_seen":"2026-04-29T10:34:08.238416Z","last_seen":"2026-04-29T10:34:08.238416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":136,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_1414504c21870f3e69e0932c0a7c47aca67330.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_1414504c21870f3e69e0932c0a7c47aca67330.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 126658\r\nLast-Modified: Fri, 20 Mar 2026 14:55:17 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd5-1eec2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de5bb95f5d2b67f4e9f70a4e3de1ab31","sha1":"c2f8260bd2fd71dde1c116b1d724a33fcac5a9c1","sha256":"afb19806f52bb414002671cccd8bcc6fd6b765828d2c8532e15467fa2b804382","sha512":"30d5c3d91dcf61ef889406c837dac1662b6e4a3e57e7e85937cf90f55d81c47bd21b1638d287e284f4ed129257b194926c5f37340f6d91bb1f432250b1b0fd94","ssdeep":"3072:66EBx7dNYhvCiLFD909SqNAL6MtsgQz8Ed3L22F2IfbfNe:6hxZNsCiLlgSqNAL6MtsgQ4ENF7TNe","tlshash":"2ec313805c7f7758e14edb44978d90f0e96e49a8220ec1a5847b0b6e4479fec8ffca41","first_seen":"2026-04-29T10:34:08.239282Z","last_seen":"2026-04-29T10:34:08.239282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1549,"timings":{"blocked":308,"dns":1,"connect":34,"send":0,"wait":943,"receive":137,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4N1Y4SZQNJ\u0026cx=c\u0026gtm=4e64r1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:14 GMT","end":"Mon, 22 Jun 2026 08:35:13 GMT"},"fingerprint":{"sha1":"BA:9E:A9:01:73:30:25:9B:9B:28:25:39:24:13:22:55:3E:F0:57:C3","sha256":"9D:AB:4E:BD:B4:98:3A:1E:70:9C:42:A2:E1:DA:0E:18:3C:BB:D8:2A:58:08:F5:85:3D:36:0E:1A:7A:27:AC:5E"}}},"request":{"raw":"GET /gtag/js?id=G-4N1Y4SZQNJ\u0026cx=c\u0026gtm=4e64r1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Wed, 29 Apr 2026 10:33:35 GMT\r\nexpires: Wed, 29 Apr 2026 10:33:35 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 181545\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":570032,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9661)","md5":"edd3633ae3669688142cb079ee4f18ea","sha1":"949f198adb48579df67fd96855d2012ef89e3c9d","sha256":"d4f2258c7ad5d09c13e204afc33b2799c9342870ec09822616f5761d530a9f13","sha512":"f25762a6f8ee0e9b3c59dd9de6237f606d020613c0c057407598a3e7e45cb9642ba2d94dbbf45b9778d4720857d4e99b5e4be3c2521b7da7e4474b62b849c5cb","ssdeep":"6144:yksXY72UJEpQ9AZWbpN27ktCcqdWDUEOtSXRKisix8O2:1l76Q9ie27k7Z4r","tlshash":"d1c4f9ceb3d67462529af468943f01cba97b24a2b49cc8abf1c8ccf01d3455a5167f78","first_seen":"2026-04-29T10:34:08.240624Z","last_seen":"2026-04-29T10:34:08.240624Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/bg-breadcrumbs-li.png","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/bg-breadcrumbs-li.png HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 1450\r\nLast-Modified: Mon, 19 Mar 2018 09:12:24 GMT\r\nConnection: keep-alive\r\nETag: \"5aaf7ef8-5aa\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 42, 8-bit/color RGBA, interlaced","md5":"2e91aad996c518067227e3a6e0993100","sha1":"35e9b78518b87a72b4c04a2a573c30b9610ea736","sha256":"60b67c096855e518c64be74dcafc29322682dc0483b7cb82ef2642e50859412f","sha512":"d90136a6add1811b4f48096786b6af5c82e21ece8892c4d51003a1b38dd3dab1fcb945f46e99d2312c614c5f1fd26611237ece37de74a098a7110b69cbd0b7e8","ssdeep":"","tlshash":"5031777df511a880a68ee5d116e6513385164ac081c4f273feced4134dd02bd98199ef","first_seen":"2026-04-29T10:34:08.241425Z","last_seen":"2026-04-29T10:34:08.241425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-29T10:33:33.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InRVSmZTVktXdHFyWEFnOE1uYnpsUXc9PSIsInZhbHVlIjoiR1daVENDS1JvKzRCMitMQlJjT1dGN1dJY0lpMndnSWpzbzg2eU5ZRDFwcWxoQUxJdzkzSjhnRjN0VnhSSG9jTU5MM3ZDK0tlcGxUbE0xRmJ2RFwvemd3PT0iLCJtYWMiOiJjYTUxZDdmM2M0OGE3YmNhMzQ0MDVhODJiMjY5YmNlZDg5ZTIxZTkyNDNhY2RiOWJlYTk5OWQyMjI4YzY0OWEzIn0%3D; rio_session=eyJpdiI6ImhTN0RVMndvdWIxWEV2UTJPMG1DT1E9PSIsInZhbHVlIjoiM1hLVHFHdnptSmRvVDNmZHdzbFU2cmh4REVKVVc4aTg4OU9RaGxtRkdyNmFpMTZlVStZUVZpOXozYjg4b05SMnBqYTlNM1N4d2lsd2MzY1AzNXVLTXc9PSIsIm1hYyI6IjY0OGU0N2FjNTNkYmY5NjQzZjFjYTZmZjFiMzM0OThlMGJjMGQwYzNhYmUzYmYyNTQyOTE5NmU1NjA5NWVmNWUifQ%3D%3D; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-cache\r\nDate: Wed, 29 Apr 2026 10:33:33 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains\r\nX-UA-Compatible: IE=10,chrome=1\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Security-Policy: default-src 'self' 'unsafe-inline' *.rio.bg facebook.com *.facebook.com *.yandex.ru cdn.jsdelivr.net cdnjs.cloudflare.com *.google.bg *.criteo.com *.pusher.com *.adtrafficquality.google *.googleadservices.com *.googlesyndication.com *.google.com *.google-analytics.com *.doubleclick.net *.googleapis.com google.com youtube.com *.youtube.com *.youtu.be *.googletagmanager.com *.googlesyndication.com *.clarity.ms c.bing.com; img-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleadservices.com *.googleapis.com *.gstatic.com *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.google.com *.adtrafficquality.google *.rio.bg *.google.com www.clarity.ms *.clarity.ms *.yandex.ru *.criteo.net *.criteo.com facebook.com *.facebook.com *.facebook.net *.googlesyndication.com *.cloudflare.com  *.pusher.com *.jsdelivr.net unpkg.com *.jquery.com *.bootstrapcdn.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.cloudflare.com *.bootstrapcdn.com cdn.jsdelivr.net *.fontawesome.com unpkg.com accounts.google.com/gsi/style *.googletagmanager.com use.fontawesome.com; font-src * data:\r\nFeature-Policy: fullscreen 'self'; geolocation 'self'; microphone 'none'\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; expires=Wed, 29-Apr-2026 12:33:33 GMT; Max-Age=7200; path=/;SameSite=None; secure\nrio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; expires=Wed, 29-Apr-2026 12:33:33 GMT; Max-Age=7200; path=/;SameSite=None; secure; HttpOnly\naff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9; expires=Sat, 09-May-2026 10:33:33 GMT; Max-Age=864000; path=/;SameSite=None; secure; HttpOnly\r\nX-FB-Cache: BYPASS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Funding Choices","description":"Funding Choices is a messaging tool that can help you comply with the EU General Data Protection Regulation (GDPR), and recover lost revenue from ad blocking users.","website":"https://developers.google.com/funding-choices","common_platform_enumeration":"","icon":"Google.svg","categories":["Cookie compliance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]}],"data":{"size":295373,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3008)","md5":"f268f54130e3f0637a7f3b6bdc695cf3","sha1":"ba22a41f17a95930d7e7d76d0bc1b41f9829b8cb","sha256":"83fa4c8f6218805e9cfd6ae080e14a984be9876afddd9a3d5591a9bf598456c8","sha512":"2671a3234c79e1fc44dbd596bc169dfe658b1dc0d47f6ee1041f5cb44bb59c00a3865f5d5e7c03e6ab057c1a487eff539eff48b25d2181d73e83d4e2d6e9f391","ssdeep":"3072:yJTU8KpuVCSzk+J8/xPONn55vIjcresRpnuoYl161XfUecbwubwuywug03V9v9pY:ypKWND8/25vrYw1dxKD1JwtmTn","tlshash":"e6545032a6f110fb0226f58a99746f09bec6d0bbee67960035ec1e9d6fd3c54891321d","first_seen":"2026-04-29T10:34:08.242393Z","last_seen":"2026-04-29T10:34:08.242393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":663,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/customElements.js?rev=1347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/customElements.js?rev=1347 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2794,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"1d587621c65f3e413d931a36b3ed4767","sha1":"4cad2ee04398ea9c017b9bbde61b0defdd6fb11c","sha256":"5038ac3fee9c61517f876564dd1a4ba862c8f6e982a5653ed9822e777bcb4c44","sha512":"8c936262cb12958a1a114e22543d71767a4bcf7da14790a1949bf1708cb35071fa65c44a95808616985bdf9bc561f9df5f276a38dc9545785133c1c4343f479f","ssdeep":"","tlshash":"5d516d07fbbda36943b53079080e119d343e9166a586098fbcf585e069b0d5ca727e38","first_seen":"2026-04-29T10:34:08.243315Z","last_seen":"2026-04-29T10:34:08.243315Z","times_seen":1,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":88,"dns":0,"connect":35,"send":0,"wait":36,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/photoswipe/photoswipe.min.js?revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /photoswipe/photoswipe.min.js?revb=1705 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31903,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31802)","md5":"90d5a5ff4789f25f79840f95fc089c0e","sha1":"791703278e7c576b08b67f18404bae9eb8cebfaf","sha256":"886d6d884e7125225084a75e396e1c3e24b2f914eb9d12a38e3ad543485ec6e8","sha512":"0a054820cdaf871d2fd130ca77339f5a2082402597c11878b5103387dc813b375ee77ca88d124c3abe3321b5ad7fa69776d6f81c15a0e61b2f724b59b61ce77c","ssdeep":"768:tC30VmiVxAtMTvnSr4l9d+eaJJubAw5qHm6oQnYxZGplj:tCHiVyeTvnS87ds3upqG6hnYxAj","tlshash":"90e2f7887386356393a731b6203f5a0922372ea3fa499dd46d27d0e17d78e6411bfe1c","first_seen":"2023-03-07T01:07:39Z","last_seen":"2026-04-29T12:35:47.709704Z","times_seen":1289,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/photoswipe/photoswipe.css?rev=1337\u0026revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /photoswipe/photoswipe.css?rev=1337\u0026revb=1705 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4191,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"88d84937f27c9465df0c86792fb90129","sha1":"e2134c2ef040c4f16dcc5413d9ba29cc76fec8f8","sha256":"e0c0fe62382a73ae14e0ce4b31d54b90d63701a0e97321eab0bc5164c5de6060","sha512":"a28855e0dfc1228dfd4b290d849404c03129c9ca3c8b4a15ec52781563f3207cb2a3e24fba9468bfd995f6bf9f04b0a07b53ee4e89ffa955a1961d46b9c9da24","ssdeep":"96:XloYdFq8YH+bKqrQEyqpjKkcvteR2KbcbKqXG0dRVwf:X5Fq8YHoKqrQETjKnvte4KbqKqRds","tlshash":"ba8145ba9b251105300fd6e5b39ff768173ec0217e27eca836a97402df06b6d1163a93","first_seen":"2026-04-29T10:34:08.244532Z","last_seen":"2026-04-29T10:34:08.244532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/448x253_2_14145056e45ffdb4a2068a1ebd3f6334f0ed93.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:44.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/448x253_2_14145056e45ffdb4a2068a1ebd3f6334f0ed93.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:44 GMT\r\nContent-Type: image/webp\r\nContent-Length: 33712\r\nLast-Modified: Fri, 20 Mar 2026 14:53:15 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5f5b-83b0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x340, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"57991cd92db18c4cf2fa51d43fc32576","sha1":"2805eb48cf75dc911b6e5255ee63b47ed6288dee","sha256":"d31a4b4e3bc02c3c3fb31bbe19f7eb7ed77185dcd9bd9d31dd6e16f81ae035d6","sha512":"6d104470fabb3519b7ef7c517680c84dabe1ccdcb49d00a0240eba236a9ecef1e25eabb324b6b51e15baa27bab39895c681ff4ac37f705d54fc51a1ebbde545e","ssdeep":"768:N5hzq8Xv0V3vADpAU/zPHnZ/u/dHEEyo+OOSQA83k91Fs7V:fBvG3vCpLFwdkEJyeHFs7V","tlshash":"cae202054fdd52c067d6c36c6d8b2bf63e93442c5c39ac8a45e1822ef0ca3283ea5357","first_seen":"2026-04-29T10:34:08.245551Z","last_seen":"2026-04-29T10:34:08.245551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17798950954\u0026cx=c\u0026gtm=4e64r1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:14 GMT","end":"Mon, 22 Jun 2026 08:35:13 GMT"},"fingerprint":{"sha1":"BA:9E:A9:01:73:30:25:9B:9B:28:25:39:24:13:22:55:3E:F0:57:C3","sha256":"9D:AB:4E:BD:B4:98:3A:1E:70:9C:42:A2:E1:DA:0E:18:3C:BB:D8:2A:58:08:F5:85:3D:36:0E:1A:7A:27:AC:5E"}}},"request":{"raw":"GET /gtag/js?id=AW-17798950954\u0026cx=c\u0026gtm=4e64r1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 29 Apr 2026 10:33:35 GMT\r\nexpires: Wed, 29 Apr 2026 10:33:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 29 Apr 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143030\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419908,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"e55e53989de77fde90dadb1e38394115","sha1":"c5ee6088a8e402ca8582856e080691fe9cd9921d","sha256":"3661c2dd3dd51e3f6f70e23e12a150335cc44f85e0345b90b3dc935da1b9fa8f","sha512":"2117196e8f484207fc268d4f7cc42849cff1b5ff5b4511c14abb295e426b20e537b8e9bdb6e90d9110bbbc3362561c6f12a8964393079dc27be8be74b6ad9efe","ssdeep":"6144:jXY72UJEQ2KZWbpN2JktCcqdWDUEOtSZuKaYBJh:87D2Ye2Jk7vJH","tlshash":"619408cdb3d6705253a3b478903f018ba57a79a2b44cc89af185cce42e7469a4277f7c","first_seen":"2026-04-29T10:34:08.246674Z","last_seen":"2026-04-29T10:34:08.246674Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/offers/94abec7040f7f21156004051bfcfae19/4538751-t.webp","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/offers/94abec7040f7f21156004051bfcfae19/4538751-t.webp HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 10290\r\nLast-Modified: Tue, 28 Apr 2026 21:00:31 GMT\r\nConnection: keep-alive\r\nETag: \"69f11fef-2832\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x153, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"344accf93c6f4ac7173ed81617cc3a47","sha1":"ae8836456ec001523239603e801add15294bd336","sha256":"09fa829dd82ec7b9af6ad736068c0429225aad4a7445542af63b86832ae27231","sha512":"3a76833dc57e15ac91c71f455de884c146ee56ed4f42821f7cb1e001d2e038c5b5ba2956385e5987d55aaf8ed4ce13723bed1f64c33a1edd0c8b460f7d38603b","ssdeep":"192:LxIYEHQh3lgg01kTn3WcfJUKFFQ9QLSqo5YFOs0pGsRjaKqZt5OXU6eToCLEEIdg:tIYEwh3lgr1kTn3WuFuyLkF94OkRZk10","tlshash":"b422bf7909ef6c61e7680d7b2399e5a067e3bcc46a3b441f208790f7ac0976852f3724","first_seen":"2026-04-29T10:34:08.247593Z","last_seen":"2026-04-29T10:34:08.247593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/lodash.custom.min.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/lodash.custom.min.js HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (733)","md5":"7c0c7ee41b5d969045211f8d8b789195","sha1":"7bb371be47f2a19836f3d73892465131805ec109","sha256":"559a2fc9edb54cb8a4de3455b3a84bf7fe9fc29577d0e9f4436e8e37e5b0cf7f","sha512":"db731c1d1de7a3c2e24b1963bf4b5bac369837cce6fe6536c46ebe0677b7556001eae50c5ea380fa26df6fdc2c34ee9f2150a0478022fd0d8d73c58f106f6951","ssdeep":"","tlshash":"f15131c534d6f04593a70931c0bf650bf178a9b209df9491e2b5d0f8b9b806c5263f2a","first_seen":"2026-04-29T10:34:08.24848Z","last_seen":"2026-04-29T10:34:08.24848Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/helpers.js?rev=543136","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/helpers.js?rev=543136 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21399,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Apache Avro version 101","md5":"353637fe4d73f0be1ba663e021edf6fc","sha1":"fe0c4d38315a33c4fdd4492814201b58dc25f4dd","sha256":"b1049a29ccad0fbddf624349a8c7c16aa87891ae785292ad00c685d307dbb2fe","sha512":"c6380570d7adea7dd97d976b16c80fe7f3940b19b7bf1dc45b2328abe948db0a3982f749e954319761d1f3aee68608b29494d1f75b7817c6cfe06f88227c50fa","ssdeep":"384:/YXFKFnvYa4/EnCF6XBiUySNLE6PhC/cdc:QXAvYazCF6XU336PhCUdc","tlshash":"3aa27249b8f23061143b703e4adfa50836b94417240ece24b99c97e46fe497996b7fec","first_seen":"2026-04-29T10:34:08.249386Z","last_seen":"2026-04-29T10:34:08.249386Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/bank.png","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/bank.png HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 10468\r\nLast-Modified: Thu, 28 Jul 2016 08:02:37 GMT\r\nConnection: keep-alive\r\nETag: \"5799bc1d-28e4\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 83, 8-bit/color RGBA, non-interlaced","md5":"513b24d2dc984e1b2281d5f3efdba5df","sha1":"02ea9c1f8c65112801cadf339b2a8eaa56129bea","sha256":"ff616873c7759dbe2deb5ad134fa7b5865dba723c73013290ca1193da20ba24b","sha512":"e20a3ad787cbeff1e2538483ed132aa5b69b10d300dc236f0f3b33628f3f75cdb760a641d70bd944c89c8e353bcf9f4567071a09e9c61dec34e8e9162df3158e","ssdeep":"192:lJ+bMGV4Nv5DFRNKZbYTBq4PmAc0LMtaeAqbMNtmIUN9MbFUK7ltEoyF:lJ2M/DHNKZsTBq4uQIeJ7mLMaK7ltEnF","tlshash":"2022b0ccac91e09edd2c57831deff4108e52035146693b3a7857a901a57daff4c2d8ca","first_seen":"2026-04-29T10:34:08.250284Z","last_seen":"2026-04-29T10:34:08.250284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_1414504c2b572acf0d1784402c77a90dd05183.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_1414504c2b572acf0d1784402c77a90dd05183.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 103358\r\nLast-Modified: Fri, 20 Mar 2026 14:55:15 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd3-193be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca0c7862002a33d461bf44ca658d94b3","sha1":"fec907c4552fe43cffe023f1e3b49e76ea7c3719","sha256":"9d48898b54562153a078931911691fac1ee62f25df3851774ca3a473138dbb84","sha512":"8723e8586c3b738d94462783303e3c7466de3e5e439697697634d52c1a677fea17e0684517d602311fd6ad40c8ae0d6a462f1f65ea82ae7d0e2faee23ac91b5d","ssdeep":"3072:kWqSiE/sMRIStNbsIG3kc6Mzl9ybKbnZEx8kU:k9E/6StNbsQMZ9ybkex2","tlshash":"e7a312b5e37532ca3db592c4b73906284bad8664c6144a3243ef03dd6dac6e48a3de4d","first_seen":"2026-04-29T10:34:08.251268Z","last_seen":"2026-04-29T10:34:08.251268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1601,"timings":{"blocked":311,"dns":1,"connect":43,"send":0,"wait":977,"receive":150,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/reservation.js?rev=2340","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/reservation.js?rev=2340 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6174,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9589bb4e5c279b0cee72887dd3620673","sha1":"173a8ad635f137b95a3c07699f2ec89ac7767466","sha256":"baffa41f8072829eb8e9ad173d0632e09c1a02e9b798c3f2d0a2e90c9767ad3d","sha512":"b92c326b5dfa4d8ead1dfa8b055f8d2e6148c375d959ecbe95d4de9215025d06b2041fed50c5d5ec2afb46e54dfe69f2b31836ac819f5634fdd639defab722c1","ssdeep":"192:fLbj5gGlM55Z88ZUeGNAsKqmYQY7PGGlg3o0:Tbj6wq5Z88ZUFNdQYqGlg3l","tlshash":"d7d10048fbec7359813b30a64c6e90ce333d5125554158bffd6891e418e0d296bbbeb8","first_seen":"2026-04-29T10:34:08.223493Z","last_seen":"2026-04-29T10:34:08.223493Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450b8549d6d2c95bde3b635dfdb4376f3b2.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:37.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450b8549d6d2c95bde3b635dfdb4376f3b2.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 61696\r\nLast-Modified: Fri, 20 Mar 2026 14:55:17 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd5-f100\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d09589889769025c069eabe9cddb52e0","sha1":"09f0e39011bc974981194f4cff7f246aa3e66226","sha256":"4a536e8e85bf738014b0192b718f33b0728cd37a03b8415cf129ce46dec9cf97","sha512":"21328879f29814551491750c947bae21d620b67dbb6a0f29b2ebb5e7b8efd2f2f6072bb0fde36c1dac1777f5d6fac2ca2d27bdb5e6b98d2746f44f566a560a62","ssdeep":"1536:FE4ur/5ZFHF1XfmmFNE8nLb2KVTh7sgSSMQc:C4uTPFHfJNEgnU","tlshash":"0653f1340590460fe359f963b498f95446952b35b42ebfd2feacf815c0269dd2b283f1","first_seen":"2026-04-29T10:34:08.252128Z","last_seen":"2026-04-29T10:34:08.252128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/448x253_2_1414509ce9a64170995ea74245dbbdcf187cbd.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:47.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/448x253_2_1414509ce9a64170995ea74245dbbdcf187cbd.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 22954\r\nLast-Modified: Fri, 20 Mar 2026 14:53:14 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5f5a-59aa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x340, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ce8944a3fe9360a8e8a7707de061702","sha1":"e315675677076054e6b02d57aa40609660b22308","sha256":"22ddebff994a2b650e594b2107a27e697f8e30fe7782462cb16a67ca581a23b6","sha512":"7fbeaa2f92863261a6b89acb049dfa023207fd5c8706b120e95741bac22dc35c5b09be0ef9ee23dbf505ff024d7d8181ad9f1eb3ce2ee397d18149f1f0383646","ssdeep":"384:iZyxIop+3PNt2SgraD2NAXa5qOIecoOT6OzxLIayUbZtyTD6OB6oiXI1B/:zxI+SgraeaeLOtLoA4P6FobR","tlshash":"baa2e005dee7ef955a8212ee308918a994a3f4b5f50723e07357805b2db3877f092051","first_seen":"2026-04-29T10:34:08.253087Z","last_seen":"2026-04-29T10:34:08.253087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/search.js?rev=3362","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/search.js?rev=3362 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7786,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"36b279bb0626bc468845ea490ac2786f","sha1":"625d7df3b7fbed5c41fb0faf4f2d5b06535870b5","sha256":"2c65a4ac07212bfff7fdfe0ef976a1b70c3bd44b9fe92f6c26130fd188ffaca8","sha512":"5739ca5661a1f3623a08332d70cae627b18fdf4f449fc3c11a98b2909bcdbd29832b50f3b55cd0805f00a5ef04cc580383ed5ec17a9e95b31bfba51a359129ba","ssdeep":"192:3hrQ5nVl++1dXUjFTIBtLbnDpSRezpCJI6CW7iNZYAg:xyDZEJXcDg","tlshash":"28f17686ef9f34ab023330b6bdab334d767c48738903186aacb8568429d4d1d574a936","first_seen":"2026-04-29T10:34:08.253979Z","last_seen":"2026-04-29T10:34:08.253979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 20408\r\nLast-Modified: Thu, 18 Dec 2025 08:05:33 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5cd-4fb8\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20408,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-29T10:34:08.212561Z","times_seen":56973,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":50,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/favicon.ico","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nConnection: keep-alive\r\nETag: \"69f1a4e4-47e\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"2f94c391fcdd7022bd51adabb884d4c9","sha1":"d993033f2b81f2c63caac94af2512041464781a7","sha256":"c78f713e633496ce9499893cb9a5504def7b86baeea4b7ea8c92bbafaebf93d1","sha512":"ee8d5633244b2f919ed111eebd593bcf938f82c7ae158207ead7eb43f816507a79f64656fccd0c629b12871dcfd7c6abb76fd076226625e01740e8ce06fe55a3","ssdeep":"","tlshash":"7d21d46dd484d90ce56a71f1c41f0a98f0faec3ef04148578b6c8165dc4e220047b748","first_seen":"2026-04-29T10:34:08.255423Z","last_seen":"2026-04-29T10:34:08.255423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/f/AGSKWxUDaDGeTHS21oOTyytQSbuRiqTLEnS3TOd0Tyeo877v1Ww0789vD8rWv-k1SUGiKN6DHXVOW3aYlinC5cIA6Ik3Ag8BlOLk8wsfoc28vzAaWrnJllTsOagEnWXsTnEDi_vaS2MAyg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzc3NDU4ODE2LDIyMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwczovL3Jpby5iZy9vZmZlci9YUXpWZU4iLG51bGwsW1s4LCJDMzFCbXBkSDNwcyJdLFs5LCJlbi1VUyJdLFszNSwiMTc3NzQ1ODgxNSJdLFsxOSwiMSJdLFsxNywiWzBdIl0sWzI0LCIiXSxbMjksImZhbHNlIl1dXQ","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:37.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /f/AGSKWxUDaDGeTHS21oOTyytQSbuRiqTLEnS3TOd0Tyeo877v1Ww0789vD8rWv-k1SUGiKN6DHXVOW3aYlinC5cIA6Ik3Ag8BlOLk8wsfoc28vzAaWrnJllTsOagEnWXsTnEDi_vaS2MAyg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzc3NDU4ODE2LDIyMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwczovL3Jpby5iZy9vZmZlci9YUXpWZU4iLG51bGwsW1s4LCJDMzFCbXBkSDNwcyJdLFs5LCJlbi1VUyJdLFszNSwiMTc3NzQ1ODgxNSJdLFsxOSwiMSJdLFsxNywiWzBdIl0sWzI0LCIiXSxbMjksImZhbHNlIl1dXQ HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 29 Apr 2026 10:33:37 GMT\r\ncontent-security-policy: script-src 'nonce-f74HAmYUmGL8YbhGlASCyA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzj6mHU4pJi8NeQYjhx6zbTBSBuvXmOdToQlyw6z9oGxF1APAeIDRUusToD8Yf6y6w_gLhI4gprCxB_qrrBKlJ9gzWcy4ctHoi_FfuycZT4sp2Y4sd2C4ifAPE3IGZ568-mdjSAzQKIF04LZFsJxHdigtieAPGp1cFsl4BYiJujce_x82wCH7Y-qFDSSMovjE_OzyspykwqLckvSktOSy1OLSpLLYo3MjAyMzAxMtczMIkvMAAAJ_NNsQ\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2658,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (897)","md5":"a879a1177aeee0425f7909764f93d86e","sha1":"21150698290d73e2aeaa1b5b2525626fb1d6a983","sha256":"52b347af1a601dc56a8e3ba34917a89207a1b997e64eda62624aed87a5d98608","sha512":"e87f25db2e3d1d2efeb1b364703e4415a7a02bc738dacbca2b947ea1dad88a2ea0862e1969b87a5b95af841d53812cd25ef82111a52ad8e7540e97e552af9db3","ssdeep":"","tlshash":"d05177a6756035e64753dd22c41b842d3837b03be009d1be3aabddf488f50075925bf9","first_seen":"2026-04-29T10:34:08.256497Z","last_seen":"2026-04-29T10:34:08.256497Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/sidebar.js?rev=1348\u0026revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/sidebar.js?rev=1348\u0026revb=1705 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4895,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"660447acde839d185b4814540260d150","sha1":"ee215949c5ce9cd11880170e6535569820ad1b0d","sha256":"039ee4f6f8e47b2f9c4ec84018782f955210839fa46d73185e32fbe70f0522a8","sha512":"0b10cb3b60e30f667de23d6ae15a792764d9ac734a08c8587797dac6102106d258492cccf4b8d62ec67c775fd4f3d9b8283540db19fff2df37bd6f6da38da41f","ssdeep":"96:i0mnglnDf/+0OLnnGIExATQm/offRjw6U2aG/w1U2YlGn5pH9HZ1SLxX:bmngu7rYm/GkWYVYSpHMt","tlshash":"1ba1136afb69321082ee729ecd4f43cd723c50569102445fbc508ef879e7af94226db4","first_seen":"2026-04-29T10:34:08.257402Z","last_seen":"2026-04-29T10:34:08.257402Z","times_seen":1,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":175,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/orestbida/cookieconsent@3.1.0/dist/cookieconsent.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/orestbida/cookieconsent@3.1.0/dist/cookieconsent.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nOrigin: https://rio.bg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:33:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.1.0\r\nx-jsd-version-type: version\r\netag: W/\"5ba3-ZgS2HxsVY5EZzjPFoZbFcHMUMIA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220161-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 5889560\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYFzq2cX%2Bb4Dw96jrVXBIYfyNJ23x%2BxSFq%2FcVUDFRxIEScK%2B5uASO0VSwhYQtIETsYDokm8JCOmejOFNArjdxCKZV9a2PlGgBKQ0NrYfie5YXvMFwxWm4Yj1G7qSDb410Ng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9f3da6354ea6568f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23331)","md5":"811fdc294d76838aea83f34c9608a303","sha1":"6604b61f1b15639119ce33c5a196c57073143080","sha256":"bc6e2f2e6381fc025b27a6b0afb5a0e1fc689c6f9fc40a78708adb2054ef4575","sha512":"a4323e926bcc069ee2ebd73556bd5a35d41fee51ae6061dc3993f12d351a893a18f870287d49103be3453071f8c316c2c1d6708174fd8a81c1a26bf240b538e2","ssdeep":"384:wu7uPZ9QdIVahu1LMFuELKQbkWJf3DG/iXsSyCre9Yrc6wF0dlF+1xk+DcEa71WY:wugGIVaI1LMFuEmikWJf3DdXsSyCre94","tlshash":"86b2e9923549f02d53f949eb2df20225f2235405385d9dc0f25c6d6f3da7a8262e3faa","first_seen":"2025-03-14T04:53:39.979957Z","last_seen":"2026-04-29T10:34:08.258509Z","times_seen":660,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":9,"dns":1,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/slipper.js?rev=3261","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/slipper.js?rev=3261 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13906,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f09a4fbdebda6cd89b6f77065249f89c","sha1":"c96823bc13047256ab77a04e4b2cb3444eb5a005","sha256":"7a739412183f62e58c1d6505fbebad2682f828c3d8b3788461c02c1e7f02992b","sha512":"f54d031da9273612d8aa534931d7c255e2274bfe727eee51cf2de94d748d30c2e3b7ca60e6f964fdbd42404e8d8d8c962637a5147a55b15f45af3fdee389b18a","ssdeep":"192:+qSqHFthF5fCN/zRcftr7bvXavmsD5jfoysp7qgAedYMrhV6dwMa1xIrdWEgcv/g:WehHKN/zR+9a1FKkIq6hEuLH4dngeI","tlshash":"a652744a77f214a55657b07e8baf8a48312200d79e0fcf507dad8688df900392bf17ad","first_seen":"2026-04-29T10:34:08.259238Z","last_seen":"2026-04-29T10:34:08.259238Z","times_seen":1,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450e2f22cdb7a34b56fa8fb14b63a20f33a.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:36.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450e2f22cdb7a34b56fa8fb14b63a20f33a.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 81264\r\nLast-Modified: Fri, 20 Mar 2026 14:55:15 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd3-13d70\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"185e422e49f81fecbeeac46d3fdb72b4","sha1":"60bf05e0770456834b2731913510e41d82e8bda4","sha256":"4acf4e954574598ab276d066c485567d555ecac777bf99ebb18844b48866e9cd","sha512":"b2c129ef9d8305d06adc13efd9db4ef1a0cecb68389f943988b5b12ac7b5a5fb21491444c75cd0765c429e6a83cef8125a7e726e037362ba733eb53b9f193267","ssdeep":"1536:RLXURpNAlmdHtsY5d0e0pz7tXDDH06UWxg6ueBB38FMYpYOIB4J:GOlmdHtJSpz7ZoKrPY99J","tlshash":"cd8312243e85838181f5ad1faff8ba39a30d7e942d2014eb16dd568e3449c1f2ebbd15","first_seen":"2026-04-29T10:34:08.260364Z","last_seen":"2026-04-29T10:34:08.260364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_1414502def1121080f671dc09977ac30594ca8.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:36.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_1414502def1121080f671dc09977ac30594ca8.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: FCCDCF=%5Bnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B32%2C%22%5B%5C%2240b8fa62-6956-4724-8953-624c1a59f4b7%5C%22%2C%5B1777458815%2C998000000%5D%5D%22%5D%5D%5D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 92654\r\nLast-Modified: Fri, 20 Mar 2026 14:55:11 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fcf-169ee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4097ddb0f7202b6db9ca1ae27ee173f1","sha1":"31ab673c96044447e8ee8ac044b95658bca88dae","sha256":"fb81012232582998cc19109057911634b68f9eace1b1de763f35e14be92e8cfb","sha512":"c763fccf4f36f7478c54ddeb2406e234db2d025fa265eb412ba8431b706076eae75e8da86caaa9791201a24cd247924eac5a6f4d8e43bdeff3485a8332b6a789","ssdeep":"1536:PuIm0k1URoYjGCGYwW/SiPWwGa935Dhec5eay70tAc3KqqFQgGN:PuImtBCzSiPga9Joc5BExqHN","tlshash":"5d9312cf7218050dbe859b1c7fd8296594f297b9320c43fc251d1aba4ddb5b18886ea2","first_seen":"2026-04-29T10:34:08.261454Z","last_seen":"2026-04-29T10:34:08.261454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/448x253_2_141450a6a9aa0cde0d98fac4e2790bcc9968ae.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/448x253_2_141450a6a9aa0cde0d98fac4e2790bcc9968ae.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 70784\r\nLast-Modified: Fri, 20 Mar 2026 14:53:13 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5f59-11480\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x340, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7affbf8ac1c778bcf061cd3b252e438e","sha1":"5e4e49f25c7de8d6d2287f484f119d351eb53e4c","sha256":"a7fe0ce931ef7aa716265b730053d751aeffe56879abd614cbd72ecaeaf3ddbd","sha512":"5631b48ffeabc7d1e1a9ca05a8065d7505542530602a11444ab1312579e0aee386ccd9e286c6699dea044dea2d1a5081375416438070a0d08dc423780737d04e","ssdeep":"1536:HKPK6yydh/4vfTgpQVSUVHZBDDS3vTcqYaLnu4Ub0d:HYKhydhmfTgsnacqYUu4UbM","tlshash":"b463029bd09129e6c2e4f703369815870a81961a0fbf6f182b2f2ddce36f6955c02f75","first_seen":"2026-04-29T10:34:08.262384Z","last_seen":"2026-04-29T10:34:08.262384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1407,"timings":{"blocked":1224,"dns":0,"connect":0,"send":0,"wait":37,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/geoLocation.js?rev=11056","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/geoLocation.js?rev=11056 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19535,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (310)","md5":"866a64aeecea87e27b497cecc79e1048","sha1":"3570d3738b1e7c6480fea9e6f326d83fdc46dc0b","sha256":"5f62bd0e9b3198e33560858852f8d679ac5711573ba983f714353d7a8d45df78","sha512":"95d202c33e5eda24d347546b0988f56cf141a724254a3000eb32b25d1d342cb22e225ed79fab825c20ae141d105f27784dc77000fa7c6b9894effdab46738010","ssdeep":"384:mYKYMmAHTvIY9eNxM+8hs53afVXc5uGC4zDaaEvsbD0d:vKYMm7Y92xM+8JVXYb7DaaE03U","tlshash":"82927655fbae2436917b32c9584b15cc32bc8037e5018869fdac5568bfe4c2e6359f38","first_seen":"2026-04-29T10:34:08.263281Z","last_seen":"2026-04-29T10:34:08.263281Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/cookieconsent-config.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/cookieconsent-config.js HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10050,"size_decoded":0,"mime_type":"application/x-javascript","magic":"HTML document, Unicode text, UTF-8 text","md5":"8a424c80f0fd834b4155aa65fee0deac","sha1":"89c4895ca388df3a01d46676d734ae436aae17fe","sha256":"79a631b2c51b4cb4fb432ffff56025419b6aff4789a8a5a9a0acb8192ed6df62","sha512":"378227d5af25a197c5e920ea64c5c81cc2046a059c045ece00d12c670cf305656cc137d65117240c5ec14b5f74c92e08e5e843581918f22ec11302e5a0fbab27","ssdeep":"96:vTEKlrG0y6cG0y6OapbWyCyycpkFkpGR6DC5MUBFmb7ShLYHjvUBFsVtHZL/LabP:vgKmbnCyycGNV5LwjKMZL/LabCyD","tlshash":"06220cf956ae744a4102f12a884d3609796580ff3feaae75356c09ac3fc823c85f635d","first_seen":"2026-04-29T10:34:08.264201Z","last_seen":"2026-04-29T10:34:08.264201Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 40128\r\nLast-Modified: Thu, 18 Dec 2025 08:05:49 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5dd-9cc0\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-29T12:35:16.061503Z","times_seen":772244,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":36,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/bg-button-green-white.png","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/bg-button-green-white.png HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 1818\r\nLast-Modified: Mon, 19 Mar 2018 09:12:24 GMT\r\nConnection: keep-alive\r\nETag: \"5aaf7ef8-71a\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 42, 8-bit/color RGBA, interlaced","md5":"fcb1a5e66c4c69ab1fe9bdb02a3f0260","sha1":"87aeef2319b79f5d9a13fa1a4a3b32ff9ac10543","sha256":"6dbb8c2733891e1c3ab8bdff7edee52bf3f1aee8ebcc3a158d72cead45477654","sha512":"a89ee54eddc2e4e1e8423721eb43c76e27e4f06aa76b28c25c2448edd6f019a9dac5045b5c9b86cc7391c235400dadef585d2cf3517e77faed10c5b2ac7bfbf4","ssdeep":"","tlshash":"d331c99bff667d115686daa161e601478c668a80f9e4e1a7fccad01315381f148bd8c7","first_seen":"2026-04-29T10:34:08.265311Z","last_seen":"2026-04-29T10:34:08.265311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"108.177.14.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:20:46 GMT","end":"Wed, 01 Jul 2026 05:20:45 GMT"},"fingerprint":{"sha1":"7E:91:7C:CB:86:94:55:D2:22:0B:1F:0F:F6:CF:1E:20:F6:AC:74:C1","sha256":"19:BF:C5:CB:D3:62:C7:93:38:2D:0F:A5:89:04:C2:12:BD:B2:1A:8D:DC:6C:A8:89:2A:30:D0:08:23:C0:13:57"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Wed, 29 Apr 2026 10:33:35 GMT\r\ndate: Wed, 29 Apr 2026 10:33:35 GMT\r\ncache-control: private, max-age=1800\r\ncontent-security-policy: script-src 'nonce-G9v8bD_QnCsBCyNqHeaGJw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":263727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2663)","md5":"fcf996855c9fd7b8549f599b31bddf63","sha1":"ddda728deb9b9b1049b316f3159258d35e3c0bbc","sha256":"c314b79b540466a6874ac3afc8ad73dcbc230299fb0a77e8e0b7415d37676e64","sha512":"15f6f2a6f93258a33e360a3f37867c05ee82676c5b4a2621cee6887eb2a1543047371928e31652669e30d5905e8149fe5d2f7a4e5392f54350e6a418958764b4","ssdeep":"6144:K/ddKIU7hxy5ahtJHaS/cCyoIwne762M3a6jH2Mp3g:SvKIOhPH/cCyRsgBM3a6jWM1g","tlshash":"ae444adcb6e270355212f8b5d43f410ab076aa79f0498cacf694c6f5acb1d890127f7a","first_seen":"2026-04-23T06:47:59.285016Z","last_seen":"2026-04-29T10:34:08.266209Z","times_seen":629,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":257,"dns":31,"connect":33,"send":0,"wait":42,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/imagesLoaded.js","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/imagesLoaded.js HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1680,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"fb411709239fc1237247375ccd42734b","sha1":"698e5faec4bebf30920c55968d99020195112305","sha256":"b05ae9a8e1ca11d6896593b4944ed7b744989283709ffc1fb3891e965d4d1e0e","sha512":"da98298bdb6a3f5d4a6565ddd3ab7fe647f4b8a9ad61649316987e858bbc99e00229f6ae5b7ce8d26d37415d65fbb67d965b36b9f7c806dab7c3cb4b6b528d44","ssdeep":"","tlshash":"73319f66fbbf72054a2270941c1f118c323ce06b994ce5abf96d01d49be062d9376f35","first_seen":"2026-04-29T10:34:08.266765Z","last_seen":"2026-04-29T10:34:08.266765Z","times_seen":1,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":89,"dns":1,"connect":36,"send":0,"wait":36,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/rio-bg-mobile.webp","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/rio-bg-mobile.webp HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2732\r\nLast-Modified: Thu, 22 May 2025 10:11:49 GMT\r\nConnection: keep-alive\r\nETag: \"682ef865-aac\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2732,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a53acc59d4a4378cbc16b45c2beee76","sha1":"581b9db3785ff13ff62f0c65143138f9c96989ea","sha256":"97a908ac900c859474c789db1c44ded824c081bf7bccda803039dd888e9cd52c","sha512":"6b5a465e53c8b2a9807baccb740ac8be27277d938d191b3cc954794d3687b21480f113c21a6cffdd1387e8143a739287adbdbb113966e7abee7d6c997814c00f","ssdeep":"","tlshash":"af516f4257111d8d430ea5f4ed98805044fdbfc9df3ecd34173d1968ad554e65e31692","first_seen":"2026-04-29T10:34:08.267757Z","last_seen":"2026-04-29T10:34:08.267757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":326,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/photoswipe/photoswipe-ui-default.min.js?revb=1705","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /photoswipe/photoswipe-ui-default.min.js?revb=1705 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9878,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (9767)","md5":"c061a13816b98ce8c8a7ffb2e62dc403","sha1":"d80b713ca1bab90f27a8af7d8e43563f0fe81860","sha256":"5ef4a4e8ea6aed767ca14731db5dccb62917b5b9796db7b843db6be3e3490428","sha512":"46e2943d35b8a8aece512d58aac84d9beb029ac1af332cc07335080568bcc272e37994ddd597a287f0f70bbbb25eb9d956e6b0f241ee29f8a573b1b2102b656a","ssdeep":"192:Q7AC3oipl7XNvFSTBv/CpvNE5qds7DKDTlxnnoT+eXhMKrqvwZpukR:Q7N3Z79gdqdsnK19oKahMkhZpukR","tlshash":"1312e6b8b046b2df51e379aea23ff40d61371b65b086f4926131d8a61e7c948502ff2c","first_seen":"2023-03-07T01:07:39Z","last_seen":"2026-04-29T10:34:08.283217Z","times_seen":1446,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 40128\r\nLast-Modified: Thu, 18 Dec 2025 08:05:49 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5dd-9cc0\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-29T12:35:16.061503Z","times_seen":772244,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":35,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.rio.bg/Static/offerImages/640x480_141450f06e56baa1096ae84df7ddb3bb8a8f6c.webp","fqdn":"old.rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"178.63.84.148","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"old.rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:10:21 GMT","end":"Tue, 30 Jun 2026 05:10:20 GMT"},"fingerprint":{"sha1":"8D:36:2F:B4:EE:CF:37:72:05:34:66:AC:0A:02:1F:83:64:93:95:6C","sha256":"91:CE:0E:3F:AB:BD:2D:FA:24:19:9C:3F:B4:8B:2D:B6:61:BA:99:85:84:17:87:BE:2C:BE:9A:60:A1:DC:9C:C9"}}},"request":{"raw":"GET /Static/offerImages/640x480_141450f06e56baa1096ae84df7ddb3bb8a8f6c.webp HTTP/1.1\r\nHost: old.rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 115196\r\nLast-Modified: Fri, 20 Mar 2026 14:55:18 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"69bd5fd6-1c1fc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b737ffee5554dee6b509f695a5f840e2","sha1":"b0128a33b5a73682878e2e6f27c6b909deac45be","sha256":"fef82de583c7a21f1d006f6a41e925f782fdf0084d4582dc86e72eac5a003a12","sha512":"9a642c6134ca3ea052da378c36df0834218f1ed63816f6bc9f4c8ea658590da2fb9c12d96cd55425f4e75a508209d7a45022647726bc1af725afdda87c2d39e1","ssdeep":"3072:6cNsR8StYhq9Z4MnS70U+2aiyW5hji3asHKAwSKF6qV:6qsRLwqb4Uo0U99/55TQLiV","tlshash":"ebb3130cc9206da73236619dc265a8f0f5791865c6ef21b2c3c8dae0211e9f5b517dfe","first_seen":"2026-04-29T10:34:08.283966Z","last_seen":"2026-04-29T10:34:08.283966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1552,"timings":{"blocked":307,"dns":1,"connect":34,"send":0,"wait":942,"receive":140,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/bg-bradcrumbs-home.png","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/bg-bradcrumbs-home.png HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 1403\r\nLast-Modified: Mon, 19 Mar 2018 09:12:24 GMT\r\nConnection: keep-alive\r\nETag: \"5aaf7ef8-57b\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 42, 8-bit/color RGBA, interlaced","md5":"37bf73d56a778c7e9f55be40e0f184a3","sha1":"4a0d34a13e3b153491a21ec57df2287c7b7bef89","sha256":"33006bf4c617bf054dc627313ee669513013f746669ca0abb8f8692d3868c021","sha512":"3092f16fe2f3a780b13b5d99bfaa7230de402281cbd82311fa888be84d3f262ef86abd118a9af4eacad85028c46c1bb75e4b893ff53fcc4b1ad74cd92856b5d1","ssdeep":"","tlshash":"2521940dd660a400430ad38224fe9177845ac892c980f42af5cfc6270c6d379c8148ef","first_seen":"2026-04-29T10:34:08.285403Z","last_seen":"2026-04-29T10:34:08.285403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 28864\r\nLast-Modified: Thu, 18 Dec 2025 08:04:38 GMT\r\nConnection: keep-alive\r\nETag: \"6943b596-70c0\"\r\nExpires: Thu, 29 Apr 2027 10:33:35 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28864,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28864, version 1.0","md5":"4b6dbec2924c348ec965e2ad24ab0f71","sha1":"ca4b40df4c0179bd79b393b176f2d5d19b0f97b4","sha256":"952fba48c212d73793dddc1a4b0589dd8098a335b58babe50dd3e9e03c223c51","sha512":"545845c2a371a1f68dc6ec589d9b87c843099fb8c2e8e1adf1a66cb36538b29969fd3db888e4ea41b011afec0b1959e89f72f8b201c7aedea7a0c9ec0a4b96ac","ssdeep":"768:eTZgucvPHL8H3nJuHrxvedCtA0CueYja6D+LlM2:e+lPr8XJuke6uZWr+2","tlshash":"e2d2f1bf8f08eafaa6efa674958c71f9cc805b3ac904624811133960475c580a7fe4cb","first_seen":"2025-05-29T21:26:20.484128Z","last_seen":"2026-04-29T10:34:08.207627Z","times_seen":4101,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/js/aplication.js?rev=7243","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /js/aplication.js?rev=7243 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Wed, 29 Apr 2026 06:27:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10700,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"114aea2e26ec4696f3e53c1737054499","sha1":"a4ff6b058d68ee3f5ccb435f54841fe0e2f22391","sha256":"626f19c7b6ec1348332a2197930affaa123b402ef688f2a40b3104b341a91964","sha512":"dd26a4df4c7673ef98e58268d1d43d3b7e5e3703df023ab135f87ba7dd34640c031d2949e6e72092cf6cfff2dd04710e18cd4a43e75e9eaa459487f1ef61a28b","ssdeep":"192:n7IWtSA6KCe/a4gLqA6bVcKjMVLKFvHoXd3OXv6anA0:n7ITK1mLAkcoXZYv6cA0","tlshash":"ac220d0db5fb62601177313f0fff90482a26690b15098e04be4f46a84fe0298f67ba5f","first_seen":"2026-04-29T10:34:08.28645Z","last_seen":"2026-04-29T10:34:08.28645Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":95,"dns":1,"connect":40,"send":0,"wait":37,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/orestbida/cookieconsent@3.1.0/dist/cookieconsent.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/orestbida/cookieconsent@3.1.0/dist/cookieconsent.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 10:33:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5838\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.1.0\r\nx-jsd-version-type: version\r\netag: W/\"7dcf-yCJw48dW3/w69banJQYABRxtQxE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230048-FRA, cache-bma-essb1270069-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3486490\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XT4u9v7YInrH2AUe%2BY%2Fbdwx%2BKY3SuPmLMdgt3Gh%2BEy39rkmujEzxa%2BwA0rvxKjfXXgSb6QXlOV0NgV713%2FhwCPCiNzMKXFacx9lDddF8X2Ols%2Bc2qPw%2BwWtJTxgVWwhoIpY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f3da633afd5b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32207,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (32207), with no line terminators","md5":"670b37e75a82edfd7af1776c3081eac5","sha1":"c82270e3c756dffc3af5b6a7250600051c6d4311","sha256":"ca046b8b1b1094107205988e7096a687b241c8ef5f3fefe5e543ed28d26646c1","sha512":"754d0cdf7221697065222157c33a5351677677b443f210d145bd5e2debdf75e99f522acc890378770d7fe437683d9b79a657721cfdb8180e836012924d3198d4","ssdeep":"768:7Dre9nDY6DQbHugcWqRBGDJQD4bHyqyXJF:Pre9nDY6DQbHug6RBGDJQD4bHyqyXD","tlshash":"06e24031f5643025957ff8af32f1574b792ca491f9a288f6f3a49a40d2c7ad80da2c4d","first_seen":"2024-02-26T12:54:47Z","last_seen":"2026-04-29T11:06:03.723429Z","times_seen":1639,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/world-map.webp","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/world-map.webp HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6312\r\nLast-Modified: Fri, 13 Mar 2026 08:38:07 GMT\r\nConnection: keep-alive\r\nETag: \"69b3ccef-18a8\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6312,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d139a5b98ef7686c4aba270b5ea090ff","sha1":"a62005f1d5ca2c38604e0b77b815ef1eb75f8320","sha256":"adfe4bbf10fa2a6aafefca572bb60578f88ef16a80d15702a0b0776bd6c901ec","sha512":"8d9db2f4e1cb77cc6d71931f03a230b3b1efab08103c6ada5fa86ec4ccd9124c4b4ee29086806c11d6b32ac179ace58d219612afdf7e1e5757b9e4b0f8ff56a5","ssdeep":"96:OGUijcH+wyUbpZlWkudeY+hyVt85rc7YFFy6TN4OUqqJv6ZIFYAlNfCY2Ev:NbjQDlWDqysRig/wvHY9K","tlshash":"f8d17e481d5634e58288dfa728d1a9371f74b4c604a0a87d3c88679e15bd4738b1f3af","first_seen":"2026-04-29T10:34:08.289299Z","last_seen":"2026-04-29T10:34:08.289299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":365,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 28864\r\nLast-Modified: Thu, 18 Dec 2025 08:04:38 GMT\r\nConnection: keep-alive\r\nETag: \"6943b596-70c0\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28864,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28864, version 1.0","md5":"4b6dbec2924c348ec965e2ad24ab0f71","sha1":"ca4b40df4c0179bd79b393b176f2d5d19b0f97b4","sha256":"952fba48c212d73793dddc1a4b0589dd8098a335b58babe50dd3e9e03c223c51","sha512":"545845c2a371a1f68dc6ec589d9b87c843099fb8c2e8e1adf1a66cb36538b29969fd3db888e4ea41b011afec0b1959e89f72f8b201c7aedea7a0c9ec0a4b96ac","ssdeep":"768:eTZgucvPHL8H3nJuHrxvedCtA0CueYja6D+LlM2:e+lPr8XJuke6uZWr+2","tlshash":"e2d2f1bf8f08eafaa6efa674958c71f9cc805b3ac904624811133960475c580a7fe4cb","first_seen":"2025-05-29T21:26:20.484128Z","last_seen":"2026-04-29T10:34:08.207627Z","times_seen":4101,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:34.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /fonts/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rio.bg/css/styles.merge.min.css?rev=2438\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 51412\r\nLast-Modified: Thu, 18 Dec 2025 08:05:07 GMT\r\nConnection: keep-alive\r\nETag: \"6943b5b3-c8d4\"\r\nExpires: Thu, 29 Apr 2027 10:33:34 GMT\r\nCache-Control: max-age=31536000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51412,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 51412, version 1.0","md5":"9e5e97447fcc00eca79e97de3b337831","sha1":"efafc4ef0f1ac7fefb6e22be4ea9c681a53d415a","sha256":"8d230115e58faa2ed303bee567b91d1a792e0c958a0118998b53648b2ab7c057","sha512":"ff66693e0a9dfcf51c16540c713de433c308e0b4afb31b48aab7fc7b46684e24494468826219fcd82e0cb26a40ec4addb8db741553e66e496d6cb1d7c9513055","ssdeep":"768:18/PyhTHe3I1xDq5OqDPcdn9jxYzJ2LEWPf4FPkEsSfR7vpNfyB4dnzoQub:rr1HAcnlxwJ2LJwFfHuyNub","tlshash":"ac3302a818f688a9d57e19446f2b0d908566123731a2037bcb524f8b12e96e332ddb77","first_seen":"2025-05-29T18:08:33.81349Z","last_seen":"2026-04-29T12:29:09.817821Z","times_seen":21444,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":34,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fundingchoicesmessages.google.com/i/pub-8790770960135766?ers=1","fqdn":"fundingchoicesmessages.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /i/pub-8790770960135766?ers=1 HTTP/1.1\r\nHost: fundingchoicesmessages.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 29 Apr 2026 10:33:35 GMT\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport, script-src 'nonce-ZaZPjkca5bv-Rq5ZhiBQBA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjamHU4pJicNGQYmi9eY51OhCXLDrP2gbEXUA8B4gNFS6xOgPxh_rLrD-AuEjiCmsLEH-qusEqUn2DNZzLhy0eiL8V-7JxlPiynZjix3YLiJ8A8TcgZnnrz6Z2NIDNAogXTgtkWwnEd2KC2J4A8anVwWyXgFiIh-P_nuPn2QQ2bG_7zaSkkZRfGJ-cn1dSlJlUWpJflJacllqcWlSWWhRvZGBkZmBiZK5nYBJfYAAAwh1JAw\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":222736,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"08ede712d130e914bd9edf0fb26222e3","sha1":"aed219d0d7cdbfa811e0bcef45f5b5c628f4faa5","sha256":"072dc4838b671c027f9ffc236d75cb6af3e719178c78c031f8ca7ba2c511f68c","sha512":"962614e6db4d160179b11f5de77dd0cfbbdc91cfffd4844d0637786710bcf6f7320f9c14746a2bcb402a9f7d6c2117ad502ce19c32d16fcc2751bddff22f7990","ssdeep":"3072:n0SGO+/oK38zUwIhcy4AMBFchwTu6B637GVZsaKGFDXkWrdDWp7:n0SGHLfw3BO7Grs/+DXkWrdDWp7","tlshash":"8a24b69872d274a69263f8a6413f400ab1bf68a3e4488cacf265ddd17ef05098537f7d","first_seen":"2026-04-29T10:34:08.290874Z","last_seen":"2026-04-29T10:34:08.290874Z","times_seen":1,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":84,"dns":36,"connect":8,"send":0,"wait":38,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8%20%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8%20%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8%20%D0%B2%20%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%BD%D0%B0%20%D0%BF%D1%8A%D1%80%D0%B2%D0%B0%20%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F:%20%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8%20%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D1%81%20%D0%B4%D0%BE%20-30%25%20%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=164680\u0026alt=SgoffVVJZTUBK18aAxt3IiEqCiElDiYUTzIUU1koDAsjbAsoXlBTQW54enFKcFNK\u0026utm_content=142347","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-29T10:33:32.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8%20%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8%20%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8%20%D0%B2%20%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F%20%D0%BD%D0%B0%20%D0%BF%D1%8A%D1%80%D0%B2%D0%B0%20%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F:%20%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8%20%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F%20%D1%81%20%D0%B4%D0%BE%20-30%25%20%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=164680\u0026alt=SgoffVVJZTUBK18aAxt3IiEqCiElDiYUTzIUU1koDAsjbAsoXlBTQW54enFKcFNK\u0026utm_content=142347 HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache\r\nDate: Wed, 29 Apr 2026 10:33:33 GMT\r\nLocation: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6InRVSmZTVktXdHFyWEFnOE1uYnpsUXc9PSIsInZhbHVlIjoiR1daVENDS1JvKzRCMitMQlJjT1dGN1dJY0lpMndnSWpzbzg2eU5ZRDFwcWxoQUxJdzkzSjhnRjN0VnhSSG9jTU5MM3ZDK0tlcGxUbE0xRmJ2RFwvemd3PT0iLCJtYWMiOiJjYTUxZDdmM2M0OGE3YmNhMzQ0MDVhODJiMjY5YmNlZDg5ZTIxZTkyNDNhY2RiOWJlYTk5OWQyMjI4YzY0OWEzIn0%3D; expires=Wed, 29-Apr-2026 12:33:33 GMT; Max-Age=7200; path=/;SameSite=None; secure\nrio_session=eyJpdiI6ImhTN0RVMndvdWIxWEV2UTJPMG1DT1E9PSIsInZhbHVlIjoiM1hLVHFHdnptSmRvVDNmZHdzbFU2cmh4REVKVVc4aTg4OU9RaGxtRkdyNmFpMTZlVStZUVZpOXozYjg4b05SMnBqYTlNM1N4d2lsd2MzY1AzNXVLTXc9PSIsIm1hYyI6IjY0OGU0N2FjNTNkYmY5NjQzZjFjYTZmZjFiMzM0OThlMGJjMGQwYzNhYmUzYmYyNTQyOTE5NmU1NjA5NWVmNWUifQ%3D%3D; expires=Wed, 29-Apr-2026 12:33:33 GMT; Max-Age=7200; path=/;SameSite=None; secure; HttpOnly\nremember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; expires=Mon, 28-Apr-2031 10:33:33 GMT; Max-Age=157680000; path=/;SameSite=None; secure; HttpOnly\ncity_location=1; expires=Fri, 29-May-2026 10:33:33 GMT; Max-Age=2592000; path=/;SameSite=None; secure\ncarty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; expires=Wed, 29-Apr-2026 12:33:33 GMT; Max-Age=7200; path=/; HttpOnly\ncarty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; expires=Mon, 28-Apr-2031 10:33:33 GMT; Max-Age=157680000; path=/\r\nX-FB-Cache: BYPASS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":295373,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-29T12:35:16.046159Z","times_seen":14375289,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":283,"dns":169,"connect":34,"send":0,"wait":48,"receive":1,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rio.bg/images/no-avatar-img.jpg","fqdn":"rio.bg","domain":"rio.bg","tld":"bg"},"ip":{"addr":"148.251.21.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347","date":"2026-04-29T10:33:35.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rio.bg","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 05:02:58 GMT","end":"Tue, 30 Jun 2026 05:02:57 GMT"},"fingerprint":{"sha1":"6D:11:E5:2D:D8:FB:CD:08:62:B6:93:DC:75:92:B7:E2:E0:98:2E:4B","sha256":"1B:5B:ED:EB:B0:A8:E2:83:9B:27:97:8D:73:68:24:E1:C1:BE:12:C8:C2:DC:8E:DB:5B:23:70:67:BF:72:C5:D3"}}},"request":{"raw":"GET /images/no-avatar-img.jpg HTTP/1.1\r\nHost: rio.bg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rio.bg/offer/XQzVeN?mc=5698\u0026utm_campaign=5698\u0026utm_medium=email\u0026utm_source=%D0%95%D0%B2%D1%82%D0%B8%D0%BD%D0%B8+%D1%81%D0%B0%D0%BC%D0%BE%D0%BB%D0%B5%D1%82%D0%BD%D0%B8+%D0%BF%D0%BE%D1%87%D0%B8%D0%B2%D0%BA%D0%B8+%D0%B2+%D0%98%D1%81%D0%BF%D0%B0%D0%BD%D0%B8%D1%8F+%D0%BD%D0%B0+%D0%BF%D1%8A%D1%80%D0%B2%D0%B0+%D0%BB%D0%B8%D0%BD%D0%B8%D1%8F%3A+%D0%A0%D0%B0%D0%BD%D0%BD%D0%B8+%D0%B7%D0%B0%D0%BF%D0%B8%D1%81%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F+%D1%81+%D0%B4%D0%BE+-30%25+%D0%BE%D1%82%D1%81%D1%82%D1%8A%D0%BF%D0%BA%D0%B0\u0026utm_content=142347\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImpocGlqU2JmOGRuTlwvWDNCeTNRZUp3PT0iLCJ2YWx1ZSI6InRRcDJFU0szbFhuTHhCR2FCZGNHU24yUjZYMXBPOUtoTzBzSGZcLzJzb21KNUgzZElPUEFVQjJxc01pd3QzZ29iM015TzBoZTBVR0ZLWUp0cmZyWkZcL1E9PSIsIm1hYyI6IjBjMGE2ZjFjNzY2YTZmNWFmMWM4M2U1ZjVlNjkzN2I5NWExNzBhNzUwNGJjMDFhMDllMGQ0OTAwNzEyZjE3YzUifQ%3D%3D; rio_session=eyJpdiI6Ikx3NHZpUnN6eStJbCt4KzM3d0NjN3c9PSIsInZhbHVlIjoicFgwZkdTXC82ZTh5N09QMnVtZzJTbEc4UDVrSTQ1ajlGckQwMWhFcHhxZk52N2ZFcHJyK0tYSlZLREhudDFxbTNcL0RaM0hyOGdLWDJpeHFKdXBWR2Q2dz09IiwibWFjIjoiMmIzZDdmMDY0ZjZkNzk5ZmNiMmMwYmY5MGE3N2U5YWE1MzU2MzgyNjg5MGNiNDgwMjcyZGRlYTVjOGU2MGE2MSJ9; remember_82e5d2c56bdd0811318f0cf078b78bfc=eyJpdiI6IkdoUjRtZnp3WVo4OG5BR0xlcG91a0E9PSIsInZhbHVlIjoiUFNOM0JPMTZHcGJIc3ZEd0d0VzBTNjgwcTlKN05uODlTR01hZ08zbGU2RzNEU0lwWHhNWHpmaWZZMFk4azZNZmY2cmNEc2RFcG9ON0hyQ09SQmlQQlVKQURzYjUxYUFMenBPRFE5dGNzWDg9IiwibWFjIjoiODA2MTYwODEyMGY5MDMxZDdjOTQzYmM2MjJhYWNlNTNiN2FiNGQ1YzkyOWFjNTlhYTdhN2NmNGQ2YWNlNjZkNiJ9; city_location=1; carty_exist=eyJpdiI6IlAzb2xibFhxN3IzU2JRajJxQmhHblE9PSIsInZhbHVlIjoiT1RuXC9GT2RxQTc1M3NEM3NpUFF2SlE9PSIsIm1hYyI6IjQzN2VlMDEyOTEyYTA0MTBiYWQyOGEwOWFmZTAxNTRiNGRkOTk1ZWFlMDBiNTBmYjFkNTNkZDhjNjVhNzI5M2MifQ%3D%3D; carty=eyJpdiI6ImQ4NlBScTNtXC9Nb3BPUVFRMkRFcGxnPT0iLCJ2YWx1ZSI6IkZJT3ROckVXNllpU05sXC9RN2Y1dG9zODdiWUlEMFlBcFpLOHpUeFBOa244PSIsIm1hYyI6ImUwNTlkM2E1OGQwOGFlNWZhOGIyZDM4ZTRjZjJiM2RlYzk0MDU5MTRiMDhhYzVhY2E0MTY5ZTc3OTE2N2VhOGQifQ%3D%3D; aff_id=eyJpdiI6IkdLRUlhbURVUlpBOGJYSDJDOFgwQmc9PSIsInZhbHVlIjoiUUFCak9CS3h3ZGZjZkgycis1MENYQT09IiwibWFjIjoiMzkzNjNhNzQ4MGNjOTE2MzI0YjBmNTAwYjkwMmM0YTc4MTgzMmIyODg1M2Y3NmNkZTdiN2YxYzVkMTJjYjZmZSJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 29 Apr 2026 10:33:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6677\r\nLast-Modified: Mon, 19 Mar 2018 09:12:24 GMT\r\nConnection: keep-alive\r\nETag: \"5aaf7ef8-1a15\"\r\nCache-Control: public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6677,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3","md5":"5b6f4910d0d01a6bbdb073e61a9ccc27","sha1":"3a20e3f93b9f75af673c5a75e0c6461d829b242f","sha256":"654ccb23ba117711fd29b245e4be92a920e4e04ede820710d55289d4b04ed7f0","sha512":"536198f052aa887978be3f2e565f9c9afadbaff476715f075990a4b7d158a8f9db60692c0e1a3ed0ca0b28475c9af737928712b31389457526969de296f89f9e","ssdeep":"96:bY2YHTps1wUI+nwdnMn1j4R6JAARCgwnYDJDZM12SES5kwFQ9hZjhjP:bO9UIMMS1cRokXAVSEwFAljP","tlshash":"bcd13b9e97230044e0edde3552eff6619810c78d229b6c6d998dc42edbb70a15d4c9f4","first_seen":"2026-04-29T10:34:08.292086Z","last_seen":"2026-04-29T10:34:08.292086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}