{"report_id":"68ed2681-7fb5-471f-9856-69e041101223","version":0,"status":"done","tags":[],"date":"2026-08-02T04:58:00Z","url":{"schema":"http","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"title":"Partners Refunds","dom":{"size":129884,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7965)","md5":"c7a4fef887ea1de621dbbb6161994da4","sha1":"90bfcc9984383dd37f5a3e0441c8aefb95f044ef","sha256":"74b456be10e1fe22a6de090c6a54fd8633559c2eb55b782cd012f2c79a40e263","sha512":"a648aed49fb78c99196dde8307cb19de0213bb4275a33ae3a4db1637b4325ae7f2eff0aa74698318a239b852ff7c706d56ca8d01a5ed9a46fe04ebaa7ebc0bf8","ssdeep":"1536:DqGzlAdCUP7X8lCnNHcEfF7vkaQDNjHaWg0Z4vGVUftD+ay1q+pXIIgyVys1syW5:DhLZ4YRbFiT7RN","tlshash":"16c318932204022c82634cec61b67b94720aa41ad555d770fbfd4d38dfdaaa81376fbd","dom_hash":"domhash44ad1696f8872517dcac08871cdd1dd3","first_seen":"2026-08-02T04:58:07.611465Z","last_seen":"2026-08-02T04:58:07.611465Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-06T04:58:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"img1.wsimg.com","ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2026-07-27T09:25:51.569312Z","alert_count":0,"request_count":50,"received_data":1500309,"sent_data":27066,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-26T22:51:17.688286Z","alert_count":0,"request_count":2,"received_data":56495,"sent_data":1508,"comment":"","tags":null,"fingerprints":null},{"fqdn":"contact.apps-api.instantpage.secureserver.net","ip":{"addr":"216.69.141.20","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"1998-03-30","domain_rank":234032,"first_seen":"2018-06-18T08:12:07Z","last_seen":"2026-07-31T01:26:02.326533Z","alert_count":0,"request_count":1,"received_data":351,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-26T23:06:30.068608Z","alert_count":0,"request_count":4,"received_data":1870631,"sent_data":2156,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":2,"received_data":81922,"sent_data":1124,"comment":"","tags":null,"fingerprints":null},{"fqdn":"partners-refunds.org","ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-30","domain_rank":0,"first_seen":"2026-08-02T04:58:03.278233Z","last_seen":"2026-08-02T04:58:03.278233Z","alert_count":0,"request_count":3,"received_data":196299,"sent_data":1672,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoDaddy Website Builder:8.0.0000","description":"","website":"https://www.godaddy.com/websites/website-builder","common_platform_enumeration":"","icon":"GoDaddy.svg","categories":["CMS"]}]},{"fqdn":"cdn.reamaze.com","ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-12-18","domain_rank":166707,"first_seen":"2017-01-30T08:41:45Z","last_seen":"2026-07-30T21:52:25.474243Z","alert_count":0,"request_count":1,"received_data":909,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1998-03-30","domain_rank":62352,"first_seen":"2022-12-18T21:17:09Z","last_seen":"2026-07-27T09:47:19.07959Z","alert_count":0,"request_count":3,"received_data":1523,"sent_data":1641,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-12T03:56:50.516588Z","times_seen":378935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a37dab530d4cba8ef9134c279c20612","sha1":"ef687d672e515d41f8b9c6b23e8c66b117a609c3","sha256":"5c16c1b3a290dd98b67c97387769f0ba4ce1a68fc5a584f603d85eec8ecfa499","sha512":"f08cbc1d2bea4b6bef0f153e83a74edfe4abf9c6f39aaadb35a6c167efd6f667b151b7154ab6e444b75420335488d27d3a33ec6e6e2c3d953a41d0a03ce563f9","ssdeep":"1536:uzSGNmZEfRDJYW/3TV4vlJHjaBaR02YX25x6JR:kD6W/WFu","tlshash":"67a3a688f6a1f07142e76165412f010bf379a965b0aed0d4e725e8f8adf85ce8173f29","size":106502,"data":"","first_seen":"2026-05-27T17:58:47.761284Z","last_seen":"2026-08-12T03:07:35.287177Z","times_seen":19021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"daa79ad7558674f6a12d962abf47f2f6","sha1":"03eea0ebebd11ec14cfa5a651eb0aca2604829a7","sha256":"604281887cd770ed21601933e9636a7a9c8a57a30d7d796ae7d760eef64d5089","sha512":"b335ebcb0c982398c56d9a5f68f5d4e36a850ab139976bd94354c7cd18f1f370866a74f46fcd399f46e410d59af7fba890a17003bb4fd456dd43a6de531d28f9","ssdeep":"","tlshash":"fae0c2ce19a0d8d257b2049bc40bf90280e9c8ff421434a4a9113ea4acb5c0f7e7d9ce","size":304,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-12T03:07:35.301421Z","times_seen":41729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/CONTACT/c/bs-_rollupPluginBabelHelpers-5804ec33.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"573040e23518f87db9c6ab3a0baa8d35","sha1":"a98af787127749bee4c7fd2629abb206c2029a7f","sha256":"bd65c90b630c1fabec690feb6d8a700295e547009da8fc1aa16f150f969d9233","sha512":"c6d03c4533c4fa5225dd65302711e02af83a15cf6633aaf4b47ded0e8659f90b2dc7be78c9a92ee1690fad9c34a62e0c70e5062e529a20fedd07fd55b8f3fde2","ssdeep":"","tlshash":"171140c832d0b8ea0a92a0d540af6503b12c6a63612c50a8e195a4705cfa81bd5f6f03","size":897,"data":"","first_seen":"2024-07-19T16:45:40Z","last_seen":"2026-08-12T03:07:35.303643Z","times_seen":21394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"25493ee20d5d79fdf0c4c9bba31ad3bb","sha1":"23cd25e683f623218fe26047e679a185edee06b2","sha256":"6909c300d73eca2ac0f58e12b455e1feb82912817b5c0ad1c301f4d0be1e639c","sha512":"75cdbfd6a1ba6d3b19a1e56231f2d19409cdda6f5492433326a7c4c34c01b50d68793f10641ea1264cce09cbfda2deaa3a323f8d9153020191d93efdfed98f60","ssdeep":"","tlshash":"a5c08c9831e250a0a2832734601f4d2ba2288489308484e0a27aa4706b323a482329bc","size":148,"data":"","first_seen":"2023-04-11T22:16:57Z","last_seen":"2026-08-12T03:07:35.317978Z","times_seen":41374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-30d4bb8e.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8984adc491ab290a6136f5831af04a21","sha1":"88ce387281e83881d2629f2c4882bcb6a02beaac","sha256":"37c828d7ff8cadc2d664a3491e0dac36f95219dc872be7a6746608971807df0a","sha512":"00b6a7e934d1475f7a4b3378fb3676182d606f5aa2c9e7cc1b6dd72a8fedd45c60951de324aa93e076fb06a055555ddc562135f10f10b1bc33d5edadbbea9cb0","ssdeep":"","tlshash":"1d2181d2a25af0f57e910a0190bb864eb00b0e6a520d18b4c4a92db22cf054bd5febdd","size":1232,"data":"","first_seen":"2025-12-13T08:02:06.643991Z","last_seen":"2026-08-12T03:07:35.303676Z","times_seen":13231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Recaptcha/recaptcha-loader-c87fd038.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fd5272ea5e2d6c4e2538c6c71be588b","sha1":"12ddf73808a3d2347ff1c710dc52ee0b1ac524c3","sha256":"34e2225d08ba7015a742a266724fec36bf130264a8e2d65213b8d3d7cf5dc6d6","sha512":"5968a35e89693951ab7e70c287311042e96ffd68e9713ae48529b29aa8e564e6be7bd9831cdb5baae880838231107ce9264a923dcf39a172fa3f55d09da31ce3","ssdeep":"96:ESZiETFAJmtJw7d6lyvsgvp4/TnyOwyQbruPWy0K8y+yQpyQyOmvD8mClvj/CElG:ESZZTaJmE7drp42OtQbrSXDx/Q4NL788","tlshash":"26a1cb28adf390a0cc73a19acb1f96c4f116941ff50cc85639cc87a4af601aec9d1fa4","size":4692,"data":"","first_seen":"2026-07-12T06:28:53.235212Z","last_seen":"2026-08-12T03:07:35.273052Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","size":891014,"data":"","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-08-05T14:51:48.383566Z","times_seen":18148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-6afcb3a5.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad9c0fc7276cdde4051108ed3bdfa229","sha1":"6286388f33b7e1402daa2fd5d2b3cee6e5d1e456","sha256":"9be7a3519ce5b6133e8af79d4480f7091693b0d194ef7048b769c2e129b148ae","sha512":"ff08970e29396800e05850321f4d6dc3d0ffad5accd3129e0cdc53a89bed73aeff73eff2103115a361ad943949a62d2ae9c49565f71b4cc56c7ee6d9be9fb60d","ssdeep":"","tlshash":"55f095e8bd95cb95021404e5c26b7102de7556ff82a855d4f84f412d3c71d572475708","size":525,"data":"","first_seen":"2025-03-31T13:41:59.64409Z","last_seen":"2026-08-12T03:07:35.266861Z","times_seen":26926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-d0652cc9.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccd1775ab6f07dcc870700da0022a22a","sha1":"6819665b286a676d6fc9fc7ad745535cefb66bb8","sha256":"fe1e94da7f48a04fc31751a80b20301674ed2f4efa25724c6da1b54e39f922b4","sha512":"3663c0653c701c29895b4cd519f3cfec2d664f3307e3421f0b8f81b6c56f01951e289ec25a143c1b838c6b77b4c40620524ef54bb056c39e2aff9163e0a4161c","ssdeep":"384:PVy/GQzPMu6bOeIiLgoJZXjI9vsBqrqYZSgsWu3sCLCpgNJe9plOc9:tMF7MtbzLDJVcAqrqYZSgsGiSgNgblb9","tlshash":"39b20816339165294ed2838695ee8501f2ed1e1de615b0ac73fb88ceab4d404632ffbd","size":24748,"data":"","first_seen":"2026-06-23T10:07:52.135829Z","last_seen":"2026-08-12T03:07:35.285602Z","times_seen":1654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f12765eb30fbdcfcdc116d13f7fc272","sha1":"506e45b7d3930756eacce0dad449a3c8cdb3eac6","sha256":"265995eb76326e95613750f6f6570b850f5c22280d262de9b9632a16ceb98b9b","sha512":"7aa2f396b105bccf2b943fd2ac60929d8bf3a0eb8574b77451cb29816df8acdcd07694b526d7e4585f849dfda3a0fe6e95661179e13f682dbf54098d98154bfb","ssdeep":"","tlshash":"25d0a7da1db08c91143115674227e102446252bfc375113588c33a243974c17a162e8a","size":221,"data":"","first_seen":"2023-03-07T01:15:03Z","last_seen":"2026-08-12T03:07:35.2978Z","times_seen":41577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-52fbaa26.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ed0e00319b4a29061dee968328ea9a1","sha1":"be1b5444ba718e30cfbab32055657655e84ff629","sha256":"f404f79872e84b6c1b26b7a8636a153237e576c168231ebed3638cf3b689a8d0","sha512":"972d765a99d01f939d52efe01fd450b22e2865c0f59d6f6a5072c55e837dff975ebab57b265dea40ea56bd8eed3ab6d6d5b944e302a17330901eabeddfd733b4","ssdeep":"","tlshash":"4511006619f84e66357f027d2a02980320a8f0bb5050597896f50b58bef589f84997e9","size":886,"data":"","first_seen":"2025-03-31T13:41:59.630397Z","last_seen":"2026-08-12T03:07:35.274293Z","times_seen":26926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-5804ec33.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"84d95b7a2c73dbcce629e7a7cc1dd0b8","sha1":"b597f2e6e17792a9a415d445166cb20a4980a50d","sha256":"baebb194cd33324576498d7f6872896adeedc3705793f647ffdb1937edc53c37","sha512":"497874af3dc1342fb355d7dd218787e69a58b265d8867d4fa21f34da4136ef45a72323c284300c33758f6c20a6cc998f222994b1c7e494846adbb950a6e704e3","ssdeep":"","tlshash":"e61163c832d0f8fa0a92a0d544af6503f12c6e63622c50b8e1d5a4705cfac0bd5faf03","size":896,"data":"","first_seen":"2024-08-08T21:53:45Z","last_seen":"2026-08-12T03:07:35.277569Z","times_seen":30986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-8f862543.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a998555b4353ee7c006f3b5921e9e6b","sha1":"1fa928cfbddb460938abbedcdd1419e9a184dbb6","sha256":"3872b0c2f5b121a4413f4401ac7290bdce7cdf9d11b3ce6f0dab617c0eb7ab98","sha512":"5c12eb989a917a5f9df8fdf4f53538e2f4af7bfe87749b2f73ef546b8ae2bce73d5b093de570156128b4910c8ec0cb1bfa10dbc71b27811a51b485fa6955a0d2","ssdeep":"","tlshash":"dc018e6609317d765893103f620a816241a5496f33eb01fedf7122183eb0f1f7717788","size":792,"data":"","first_seen":"2025-12-15T12:08:43.741965Z","last_seen":"2026-08-12T03:07:35.295114Z","times_seen":10364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f7ef845cda0c2057d16ba8cf88b5249","sha1":"31c1ddfa8a34fcbbce5cd5981ecda65a79654853","sha256":"4870cfb3a3f35b547ec5f03ab6cb0aac7b5760bf9189fa8614fc20b3d85b6b3f","sha512":"bdd3dc08c99cefab33fb305cc75b5b174b4f0ba296b58d43c9ec0b2c0d922737eda34ddadaaf42f8d293da8e7a533439c1cd108c6176a64a9ec20028ff0d1f93","ssdeep":"","tlshash":"eb1125771a08e0360f3209d5e1ffdab1e443711cf16849e8a41adac42eaaccbce05485","size":1010,"data":"","first_seen":"2026-07-15T00:14:50.572261Z","last_seen":"2026-08-05T10:02:48.264078Z","times_seen":971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c007b07158372775845c940b37b263c4","sha1":"c5532fa5f20b8ad72c8884d9648f05c820d65899","sha256":"6fe7a88b26d0645771e24eb2e09a27604bdcc0e626b29f904b378b22c5b78449","sha512":"f2fd8a55f1a4d3c23c60feb909a6340ea89b4fd3159a6ec70ef25fec5786374805c2cb6c0dc748f41bf51e0defe9cc5a2828cc0189a1c6021d47b29464a6df3b","ssdeep":"","tlshash":"39c08c9831d240a0a18b1774904f1993a2248486308584c0a239a0b06736294813147c","size":141,"data":"","first_seen":"2023-04-11T22:16:57Z","last_seen":"2026-08-12T03:07:35.315282Z","times_seen":41378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/MESSAGING/bs-Component-5c8ab323.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce4887cc6309b903625e9d0495fd2e4b","sha1":"bd9b3468d2d780431813fe6ceb7a578604366262","sha256":"743aeac35f7216924e3092a094880c24ca661937eee8d066ed22f21034458c48","sha512":"6160350bd5a9e8e975ccebedfbacb5d487e1bd097a69dcb268dee567bdaf6f9145656a24d0489c76bd8b9c8a77a52305e81bb69173b56380271cfcbf10f793af","ssdeep":"384:LBlUJGYkn2tr2eX4f5d4jSlKu4OiVs1i94aQhrd6u4b4iEHj74O84NVXIMv/huHn:L+knDq4f5d4jSlKu4OiVCi94a8Qu4b4G","tlshash":"e3623184bd109519ccbfc41ed69926c23285549b60be97b1b0dcf4b9a3c879c3ca5bf1","size":15227,"data":"","first_seen":"2026-06-20T01:34:05.756497Z","last_seen":"2026-08-12T03:07:35.295445Z","times_seen":1704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Form-38e81dc3.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"19ed5e3951656782d8a20ac6f53bdf32","sha1":"4326b86a38e0075cc735395a6f2951c805ab02f1","sha256":"ac72dc40c018a1af1dfe20b187254102babf7e5d0268a3956416b93c25802f45","sha512":"c8bb6293db0fafbfff47431545174f32642cdd808ac780f51211381da1e0d9282156079aea44e999151d5e06bf50f578ebf169ab59e4c2f1acbab6439fae91dc","ssdeep":"1536:wbXwjA9wjAyztr64JJGsUv3HWX5Y3kXfkFTdFYTtdFRQTnz+0k/uEy7gfblxRdp6:wbXwjA9wjAyztr64JJd5Y3kXfkldFYTm","tlshash":"5143f9d0750290a94ef9844ec81808417375599e207e96a0f6ecfce6bbd4bdd387e7b2","size":58987,"data":"","first_seen":"2026-06-18T04:45:00.175763Z","last_seen":"2026-08-12T03:07:35.292782Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f93c90048a29aef6f7cbd7c58389adb","sha1":"73bc7e6dd526112920afa544504fd8295b347b30","sha256":"82633730a52504643ddd8819d40b8160b0b16e9b9cfd0c2663d1dedd5a5bb1ab","sha512":"b2fc7221679ca99833c6b12b694e84e5cfb019604d16a5fb2ced47491704d1957bc0d269b13d4f9e882ed10c973c430f776ed55c65595cdc3420f0cfc1aaa132","ssdeep":"","tlshash":"08f05c8dd568987504f333d43e2fb701b63501a4e05959f80ff6134819a2f1f9267d84","size":441,"data":"","first_seen":"2026-06-27T22:23:39.693782Z","last_seen":"2026-08-12T03:07:35.311986Z","times_seen":1248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"070ced49036d569fcc0760b855e36abf","sha1":"ffe21d03fb4197ee8cf1eb29bb122777afb6325f","sha256":"f2301c29b77b22ff2d5a43d91701bd79282956b734613c9d455f13e20321b22e","sha512":"4cd2b421062684763305b9b8b32bd70c5dc371240093d6c242667effde601fdd9d299721e04580f800368a596fccce7409c9e6d6366088c4c858e0a7b9e26b6f","ssdeep":"","tlshash":"ce11006072c8b07e13f034ed9152cbae5d76a2c4b091e0fc380e4c8120079bf877254d","size":1105,"data":"","first_seen":"2026-07-16T02:26:12.595333Z","last_seen":"2026-08-12T03:07:35.314102Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-12T03:58:35.1019Z","times_seen":505501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d525a3a9be7f400f0193fab047987ad2","sha1":"9edca4ac619f3a4ed2293bb2a4cd096c170d77d6","sha256":"df40e092600f20d0c5e644005261d6d64d8429308738d3e1667cf03e153c2f85","sha512":"87d9c8de76b55be74c22fd04cc6ea694f0117af8b878e6bd2e67d069c003a42004c26854d542123b2d3c5df6b805fa48abb52344db8c3e01931f14876e8f5e0e","ssdeep":"768:L/GwbkeLI9479EqI3Yu2ZnyuHjwkMr+kpCKkBs6+paxhp:7GwLLISacpjMr8KkBIpa9","tlshash":"c8f2ae0c981b289bce7e8bd15ff137d854bc40ac4a8b10be30fe24c24a6a5db758d58c","size":36073,"data":"","first_seen":"2026-08-02T04:58:07.685521Z","last_seen":"2026-08-02T04:58:07.685521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"2e2fadb2f94f8aac778ba92f7a42562e","sha1":"ce36065c4b840b15eb7a5db3a0714443e0e589a6","sha256":"f020cafe7019dda7755577ad8ac2e5bdee87534b530f75d65286d31c07420739","sha512":"17bf4fb7bc2d907160bcaf201499ea6aab2c0e413c56a3a2dbeecb3637b41603f62c9155f0dc137709ff8fa0e646a1024f44ba9c6b9d1ba068d227a0fcfd67c9","ssdeep":"","tlshash":"a6b01227a654c4191c000146c827d7ade002412cf67080fc4068dfd402d29a78501800","size":102,"data":"","first_seen":"2026-07-14T22:23:00.817585Z","last_seen":"2026-08-05T14:51:48.379869Z","times_seen":14805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-imageToHeaderTreatments-cbda470b.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9510613a04bb527b3bf4fd896d972b2e","sha1":"0b71e755ed0f246308949cf3aaf30ea448f3ebf9","sha256":"95e1af2d428ffaf9c45bf7a9889c53da406e20e48599ca5efbeea8680cdace1f","sha512":"e963586708a47bca4f0d52cd33f95b37f603926a5812f7cf21a6cf2c6785767114a0840438f3f5b3739bb573df8056cdd76512e1ca2e950b6155d5fa901d1b7f","ssdeep":"","tlshash":"dae0c0cd78f0e48b4b311494811f246a60ea513eb2026c00fb064d2238b140ba0b271b","size":354,"data":"","first_seen":"2025-03-31T13:41:59.628873Z","last_seen":"2026-08-12T03:07:35.271556Z","times_seen":25812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/CONTACT/c/bs-data-aids-e16ec476.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7112942be59d2fe97c50ada22c640fa7","sha1":"64863c928776a59da08b95722d963ed83ad1dd11","sha256":"1bf0ef11c7a47f6399224c0bef519ae58f5756ea422051b3dcbedc643a72abfb","sha512":"d54856fb8be1b96d0908b1f1eaaecbda3e2040681b1112ba8d214f4a36cd269c726297be888e4c5059063ebda105a98bc2e63b25bccb3fbb9f5096f52ae0c2e7","ssdeep":"","tlshash":"433179aace7a0d8f896cca1cb967400900fcd01fc434597536912f1194b7afac56bfd6","size":1860,"data":"","first_seen":"2023-03-07T01:15:49Z","last_seen":"2026-08-12T03:07:35.298813Z","times_seen":22967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"acd4f2b6117e5054fc9bf848ae8121ca","sha1":"ae4d5f41d854ba8d99a4a1ec6ee6d6c3c0a859b8","sha256":"66774f89fcfa5674be9aef60e3fe3cb81e4dd88246bde4e5392df8b99fefd4db","sha512":"906fc9144d4ab81e8000cbe4a7af7aff775464347449193337e8738d705888c02b9476e083b3b67bdb3cbc312aac4644c10737bc1fc5f9f08b38f5f45a2410f9","ssdeep":"","tlshash":"15e07d8855f5fcf018340089470fa107cddbc0fe9a282098c5c13564297088fe1e6b97","size":324,"data":"","first_seen":"2023-03-08T14:29:26Z","last_seen":"2026-08-12T03:07:35.289818Z","times_seen":33647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"852cbc5322260e00b44f2c682f88b2c7","sha1":"bcaf229e6134f43eb5f974c9891e4d16faf1d344","sha256":"bae437dbefe58377d88c9d579db7c59f4202f3fbf88866d0005fb375be6b2cd7","sha512":"f031b43f7fa0da001f71ddcffe5e322a94c5f1f52f7c4d67d34880243d9d361ac55c0e5001dd004390867cb31e5def5d4d9282e6e2ecb9aec0e880aa5b786ba3","ssdeep":"","tlshash":"365157d83120895d4c7bc49ec50d0d4a735c56e7217e01b16699b8a8faa1bed793f370","size":3092,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-12T03:07:35.264766Z","times_seen":39719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"87224fd16f5742277a37ac58fb0e105b","sha1":"406cbec58aaea190c5823b225c81c99617ef226f","sha256":"c57b56262814a17515bc48cbdaa4daba897e22bb09fd8a36efd80bce5a68d469","sha512":"a129ee9336576e2776b81d410785f9f99754a74be0379cb1e603574cc1971997939bdf556ada00523179ffdc34a248e2925708d2086ede0064518def25e818a3","ssdeep":"","tlshash":"71c02ba831e340e0e1871734504f4d1bb138c88630c5c4c0a23af070b737394c13147c","size":140,"data":"","first_seen":"2023-04-11T22:16:57Z","last_seen":"2026-08-12T03:07:35.307976Z","times_seen":41380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-5ae2d61e.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e888c8e151a3720b8934f1b94741ea6a","sha1":"687166e4de6b66d850d2c3e98123bf1c6592d9b0","sha256":"6113ebbbad02214e82be790c1c243b263a0c6080f843eda0653353c6f6bed1b5","sha512":"b6982571c38017ff4eb104efde4c2c6691535d9bdc269f7e16a057e3187e53018dfa65550ba528463e1d845eb8423fbd7af9aa542a630d685bebe9b82d1b680e","ssdeep":"","tlshash":"5d31ec76987811151097800d8b0eb241370569db2bbdabb17fee85352fec61c69f13f8","size":1869,"data":"","first_seen":"2026-07-12T06:26:59.011527Z","last_seen":"2026-08-12T03:07:35.272211Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f/gpub/f6883bd044cc99dd/script.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c7ada840d8d16fac3ffc47d17c42849","sha1":"0a870e75bbce2ab467b90f55746168d1ee538b5a","sha256":"fe7e5d334dff46e722e7926210bb8fe1afb262105e485ffefba1252a0be681e6","sha512":"7ea02d3ea6ad107600c40a05bab5c4bc7f013a1ad4470c6f8b085256f9765927b164cd4efd11a7412bf9095ae1498663952ce166f5d3bbd8821b14919d03602e","ssdeep":"768:RfLoCGFoLe8vvmmSUd/ibzfssrD+zEP2Ap+xfNmOnnGzU4pxmTXIfRMpAKse:ZuPTsfJSFE4f+pAKb","tlshash":"c863bc6e76e5d025fe8c0f3bd1f59d6a8c8813fb8578483c559bdd812be2af58218d02","size":71215,"data":"","first_seen":"2026-08-02T04:58:07.676151Z","last_seen":"2026-08-02T04:58:40.64267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/form/formIdentifiers-99523055.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"df594cd8b37d0680d5d858957921d1f9","sha1":"3c4eaf647ea26f69ae5cb88273c2628541b8cf91","sha256":"36de6989c237548c20ef7f65c8b6e3a0790da62b3ab4e77c6ca2ee217a091472","sha512":"a8b8563ea5e74e618c6446fe8d238db0dbcb5cebdfd32dfe5de26da8b5eab3a7845391b5c2f4ed43c3c983cad6f2efc109869eeaf7134eb735fdea397f7664d9","ssdeep":"","tlshash":"c7f09e266dad4dd8133e004cc386f1c034494a371254742057b48e617f7ca5f48e67b7","size":485,"data":"","first_seen":"2026-07-13T05:00:16.807101Z","last_seen":"2026-08-10T09:29:07.31034Z","times_seen":1248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-c06d2bc9.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dd21cc0c8ada625e47f0a16a29b3a9b","sha1":"777a8f43b4b0ac811292e843a780f05edb71784d","sha256":"3e7bcfdf95bb35c88c8e7993f75ac8034ef238fed5a3ab5009b5802a64cf936d","sha512":"25a04e0ca9a35eb649262e38ae50c8fbdde54a3e732230e4af16c05b8f2bae91f1447bc6257353aa23ffe2dac9da9315ad7da0278678fa9430be108cc9cafeaa","ssdeep":"","tlshash":"5d21108c39d2a5a51563e028861fa802f1189ca310bcec60769ce260bf5287a87f6646","size":1260,"data":"","first_seen":"2026-07-12T06:26:59.014443Z","last_seen":"2026-08-12T03:07:35.298168Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl-tti.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c56940a864f144fae2eb40ee952cb94","sha1":"ebfc754ce962a1f9025853f2995b3987f0383d87","sha256":"3c37a4aa3cf6aaae6921a4b750c0e4f81fd338d6878be90b0faf2f921039cb23","sha512":"aef4b08a01d56bd8855653499b375db11d8fd7d67c4bcdc74323236badc47b70ddfedc14ce89828736c63ffe147bf71c14311580296d41b59f11a3305993addd","ssdeep":"384:/z+lhnKuowsx9pGxw57yty3eOHenS934osy:JioFP934Y","tlshash":"a5a2e7cdf6e0b07a13b72072903f520bf236b625180a40a4a279e9f57cb555e5227fbd","size":21592,"data":"","first_seen":"2023-10-20T03:52:57Z","last_seen":"2026-08-12T03:07:35.246706Z","times_seen":42374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-cd72c02c.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"10eb836b2fbfadf389ba5797a65bfe71","sha1":"521a65b3d413ad1589ae9ba9feef78a713c333b7","sha256":"1267129ad5dc76763ddc20a97bca66880af535b0a197bc06ec89dfa3e09f5730","sha512":"e2cf47bf99815d479a4be81dcf703253bf2c06a8fdc41851edaa703f9313f32a00f2693cd39e39087f0382398cc0c4f7af3f90fae019871786d314f97c328e8a","ssdeep":"192:6LHHDkHAnKzW6rumM6feyY3LRejwhVYIJEe4mHpBgKnYJsvIFO/Es5KrzNqNj:6LDhWW6rumVfnY3LRejwhVYIJymHpCK9","tlshash":"d30277ee37896c15e6d3425aba99440172a05992a129dbedff7f1e7f32b08872131370","size":8231,"data":"","first_seen":"2026-07-24T06:30:01.062604Z","last_seen":"2026-08-12T03:07:35.284522Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/traffic2-8b152a1a.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf9beda5a8839f5a124ee2e5e4357225","sha1":"a9deecf2e650e76788474d01f57d194e827a127b","sha256":"f24f96060a006d598a3c94c962544ce07bcb67f9d1f0fa1f8ebfd3fd58907b06","sha512":"df7d3dfd934c55e35f9d686b9d68463ddf0bff00c858005b1bfaba502e62e5773febe450fd3b2cc82a9481fc0b986a936f06e5fee1c65ffa4a57e230d84c4f97","ssdeep":"","tlshash":"8b21d06eb8f914d2122750599bc7b10d742414373298bce8be5d8cac5f9d68c52f6fa0","size":1337,"data":"","first_seen":"2026-07-12T06:26:59.02091Z","last_seen":"2026-08-12T03:07:35.252972Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/CONTACT/bs-contact3-contact-form-48030a46.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf051342d17dec824a8d93362a1812d","sha1":"07e4f834c7c2a73c20be68c5c707f50ebf72701d","sha256":"8ef9d11c22b4daf7f94bbee7eafe8d4a597e1a99562bf81143f8efa4ee7d079f","sha512":"ff744648af93c313d77ca0869223173711942e7d6a55d796f182adda027965febaadac8ebbbf22d2e38bfdf851b7cbbeab239bc4f99bc3cbd32710f6453b3fe6","ssdeep":"","tlshash":"fe21ed64786440944cff848fc95a040233c495afc0bf05e0b6dab4e9f6d97ac3ca6bb1","size":1425,"data":"","first_seen":"2023-03-08T14:28:04Z","last_seen":"2026-08-12T03:07:35.298471Z","times_seen":16156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-dc689f22.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3dd10b90c8e60bec1f22e13b47ad695","sha1":"e8793d96240098e5b0f801c19e70644388c3c6b9","sha256":"ebaa7c65b7616917ed8f17f0136faa8e50b376d1762d2a15cb51950cc1df2370","sha512":"6634adc4ec9323e2017152a8d02054f4b622328c608f7048c2fd3655ec8ec7ec10c353830374bfa6b2101bcdc39273010c7106d05af743cbbc9b1e521c99b22b","ssdeep":"","tlshash":"4e419d21cea51cea7fa25679bca1155e059d00bf76c429b037fa5f1035a0cb2c0637b7","size":1904,"data":"","first_seen":"2024-12-09T12:25:58.824013Z","last_seen":"2026-08-12T03:07:35.295793Z","times_seen":29736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e32074de0e236606c951919219e84d83","sha1":"819d74fcdf5d7ba9e9f3e0cc280917bdd30b7a7a","sha256":"c82c443d63f09495807b95430e901b713c65cfea48e2d53e18c291f3eaa41015","sha512":"058b60dc03de83b16feb07cfc8768f59a27dab65620c44496e88c3cad455aecb1750af3b83bbb15a9af7625efa38e118385e8d602c194299124a76ffcd11c09a","ssdeep":"","tlshash":"eae0261d0d7740e808bb60dcc30bf914b51918b7c0bc10a20d18a79170e1aaf5552d34","size":316,"data":"","first_seen":"2026-07-13T05:00:16.787043Z","last_seen":"2026-08-10T09:29:07.330055Z","times_seen":1346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/form/recaptchaTypes-ce199ba5.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e64c290468177efa30b4337646886525","sha1":"981d54dc35a4ac322b585fa41921b794d65bf1dd","sha256":"348c498661d123117e7662d2c99d9f691d2d09afaedf759f6df40f7f5704c550","sha512":"cfa39fcfc3ea6fb54536d55661b407a8614336067cf40aada7c485d8b165c896e21f6a19fdb2a0a5e1333c8420ef243608de58a1f1dd294efe10047c0e1110d4","ssdeep":"","tlshash":"9de02b377d7e88ec5b75005cc307f1c0b450593a405868601b684f70bbb48afa595ae5","size":389,"data":"","first_seen":"2026-07-13T07:20:34.845677Z","last_seen":"2026-08-12T03:07:35.288208Z","times_seen":1111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.7.1.0.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"65011531a77658f5a7b578002cd9c264","sha1":"5febf12deebeeb746b773ddc5166957efc421263","sha256":"4620d72e13ec26c030ce305a42a92b0374d47dd592b8fe16084a6d8b6ce4f6b2","sha512":"37d4fee57385829254e2b8075bd0f254495c85f2ab673e4f1b526bfaa9cd733ccbca981e4355177de48312854398c45b892c9efe4bf0eb5eaf074c904fd56faa","ssdeep":"3072:5XimkZbrg7xDUYzqz/UmCDsm/sMAgOZjBEQEiklhSiL9e3e+rLudbBv/xGZFEoyi:5z6brwUYGzcQejikuigRSpBHb/JXRq","tlshash":"b4943bd83592f4a157a301a5403f4506f33d6d3b640da490f3a2edd6b8a49dea07bf3a","size":418950,"data":"","first_seen":"2026-07-31T19:47:19.864403Z","last_seen":"2026-08-11T13:33:29.983602Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f/gpub/c0cc1602e8999bc6/script.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ea18f1556e83a6dddb59013aab7c894","sha1":"374b304d09908096118d46b0b166f3080c65db67","sha256":"2d12c1ddca66ed020d90186e5198245dfcbfccd23218d524aeeccac5b05e86f6","sha512":"fcef73abd53991de09a4ff0e0e7dc8cd6f06594aea67cf4a9bb62c2a33ef12e7f506c46ac1a377e5f50b7b042aac55f21b7e75b94c10e8f9e2b98e8b07526a17","ssdeep":"384:yYfBT6q6gkB3ZOLuBso9dEwUgkK2kKWYf5PJDJ4n0KrIm/t3hHCLnonJ3R9hlxbc:ymBT6PgkB3ZOLuBso9bkHkJYf5BF40pD","tlshash":"d0b2f82b7611c82ad2821c9f777f3f32399680166147ac1cb95cc9255be287d63e3bc6","size":24078,"data":"","first_seen":"2026-08-02T04:58:07.620165Z","last_seen":"2026-08-02T04:58:40.601845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"32c08a365698a3ca8b66d691948a115d","sha1":"e374f8462dedcb0242f7355046b189ad56b7df13","sha256":"b62fa6002bcca4baebd6de702a4333bfd2e094b4d578e577b1ad60f72e118cfa","sha512":"cf0ad9e290ed385b1607852596fab4d08d18adaafa337898b748fe09c67c0fae73192c8b3dacb9ce1be2dd4f7b1bf98b2fa7d0dba6e8bd9ebc3f3ea2cf297988","ssdeep":"","tlshash":"023137c5fadcd95103b820d99a2a7015f8b8fd7702bce8a18d1c89f094f012f52969e5","size":1449,"data":"","first_seen":"2026-07-13T05:00:16.814373Z","last_seen":"2026-08-10T09:29:07.292118Z","times_seen":1340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eabe13aaf958e15f8828a799e2b9a493","sha1":"dc0e14d62503e91abb4766f72a2048b195d0a077","sha256":"c3f619b3335b8d9bbace1688732a63750f28c0a332119ec10a7c79fce0810fc4","sha512":"7688bae0cef0b41683cd100220b67a0052ef4e3e957ddcbb45a6a55f4b23bc01ac764016477d728be2a7e2bbfab705136e57ba2423974808e99e626078fbd103","ssdeep":"96:I7rTaLLnIq5aeelCN3Et77yqAS41exgxkxD8j69NHnb7vEz:KQIIaBsN3Et77y7S41ggxSD8j695n/v+","tlshash":"7491f01930f235b5046bb17d071fa515763451873088dda43f8dcb549faa93a8e97bcc","size":4474,"data":"","first_seen":"2026-02-23T22:26:13.334323Z","last_seen":"2026-08-11T22:11:37.657118Z","times_seen":13658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/dynamicFontScaler-31729aff.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"be37c211f8e8ec7fdb49e338c53f820a","sha1":"aee0f639d548fa67833fd7bc8da46484e96b8cba","sha256":"37086fe8f96d3032acef19028e744aec530742f7cf0441370a454b206822c907","sha512":"e011d616eb360639b953b13d86c97075fb2d066236f846c36cd0210135a419352624069ab771087a5ce00953eb582d938d3f7c9bff116c356a96dfa1cc01b424","ssdeep":"","tlshash":"9e31cb6a592140156403500da71f3615362840874d9abc507acd67a8fffcbbf74f2bbc","size":1465,"data":"","first_seen":"2026-07-12T06:26:59.050899Z","last_seen":"2026-08-12T03:07:35.268337Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/utils/form-1fa99f0a.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c53cce727e7ddf45f074b2016e10007b","sha1":"bff0ae43df137e9b4a13a52f3c67beb6b75d96bc","sha256":"ceaba6398316c81ed7a08bf00d17d6fe3cd1a0ef615b83c99a0a777b10ae7462","sha512":"2c8d39cbbd45d6dbfd36ffca6decf4bcd0ac676e13c259e2a16553122427ebc8083fa38facf85be112f57b64d3955b7a21682c9fc07575ce19ebe93294ad358d","ssdeep":"","tlshash":"bd31973e4db1245c8a63267b434ff2193b6169237488e9d0ffbcda036f0190476e4aa9","size":1531,"data":"","first_seen":"2026-07-16T12:27:59.756246Z","last_seen":"2026-08-12T03:07:35.304218Z","times_seen":1091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/DynamicFontScaler-d6821741.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"45f08442fd20e45e6735bab7efe465fc","sha1":"56a887f57437c7c4e0978005a0689262d7f4c497","sha256":"4fa67d74e2b8f77bb9a12a3e4b36eebba14d846c1d96afc353f4fadf6564ab04","sha512":"ee6567cb6aa2a955a36ded0e449bc586e2866b0b7168c91c7ba37a9ec6bab5ac96d0cb2b35ae02f0d86d9c0189981e655b669c71fd01726130094cdacfffd076","ssdeep":"192:gxRnxugm1B3ZOAYpMBSLo9dfcCCcai/SazsXbM5k9o4zk9oTx3EkOcimlQfchA9u:y6gkB3ZOLuBso9dEwUgkK2kK1nugsV+J","tlshash":"3f0255053ef20036a297504edb1fa1457119948720abfe50beddc2686fd4a7e25f2fac","size":8607,"data":"","first_seen":"2026-07-12T06:26:59.023542Z","last_seen":"2026-08-12T03:07:35.28622Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/assets/reamaze-godaddy-loader.js","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18adec0158629b490c5bdc3c98f1ef39","sha1":"e77456bdaeaeeb29234cbd90026e7d14775ea1ba","sha256":"1b4a75ceb53f86ae724560e965a08a46009a31646a1c3e1eeea4e22b7ce6f322","sha512":"572c433559c3214c6cd9031d2a8090011d5755d7ba58af3e4d3c6c33c1b95b08317ef2cd63cf81a1587397962874d0a2a6bc2c2a73e7530abcbd8cde13064d79","ssdeep":"","tlshash":"52f08b457f555520926915a930b7c3e8791114323b074090d39fa8f435bcea5480bf4d","size":560,"data":"","first_seen":"2025-03-29T13:11:15.079517Z","last_seen":"2026-08-11T22:11:37.630807Z","times_seen":19905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-a2c518b6.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c44ebbb1c5cc623f903b5ec3f9c94e13","sha1":"c1b02b25117e84cc994936d034a3b02d0e6c28dc","sha256":"2c0b8b1b44960fa5584fb5d8f1bb50e21662ec06a70fca8eedf8299c69f2e2ba","sha512":"8049e19c0a08a1504b539d34bbbeb642b651ce49b3b5ac2c585e6796ca9cce6e6a9593094eeecfc8e00e9d30f19ee27743a33e24d6dbdc840e7cbacdbe057df3","ssdeep":"384:7EuK/6kvTqLDwd24bXXyiAhSs1hiAhAiSeG3dvBRUqSMkc6u:ouJ5MA4DXc1+ipG3TzSMk0","tlshash":"c6a275da7e9062cc5487db9ede2a9944331e30bf757f4650128edb98a50bb84fd4b820","size":22398,"data":"","first_seen":"2023-09-30T14:43:03Z","last_seen":"2026-08-12T03:07:35.296149Z","times_seen":30177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Recaptcha/badge-2500008a.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"910416df6bd0c15f6d4667e23125ecc3","sha1":"0a4f41005fc4109c1b68bf5e8b9be1aba25d5aad","sha256":"16d859259f0125cb3d1f6ca1cd2cbe9618dd69230424ea221a3b761d75511bf9","sha512":"d2c61fda3d827ca262faf92d2e7570e0caa844e241d8f8d89fa405a0ad106bc2c1f43d3495f9ef0fe18b2567425624de09c9fe88c3d1363cea13ad6f4408f729","ssdeep":"","tlshash":"d6f0c6293d6540e5095b404cc31af5d572494c77c1bd58701a494fb07fb869f65f16b0","size":555,"data":"","first_seen":"2026-07-12T06:26:59.055571Z","last_seen":"2026-08-12T03:07:35.297131Z","times_seen":459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/toPropertyKey-9bd6a336.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"510bf0b21eb852ec2589419aabfb4a79","sha1":"93f6bd5ad13b5b8e5c6357d027723852445e11ae","sha256":"9d5460f0ec568a845e8a22d670963ffbb17a96eafd144911f3054f504d2e3d54","sha512":"98755dfcda8cee3bd980e8cff114c0b97df9d8dcc950cd23601cf21de27637391b1d55a39a9e4dfe8903ac248e27fd1959b9545371c9fb7611a52096d82eeebe","ssdeep":"","tlshash":"0d41374974f87056135fa019f36ea0667ce0c4aa01e8e410779ccaf4afa0c3a57e6fc9","size":2149,"data":"","first_seen":"2026-07-16T03:13:50.397698Z","last_seen":"2026-08-12T03:07:35.276204Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-9ae4189f.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"faa8e0f97f848894e111464c8932c74e","sha1":"c5d755cb28aa68e5f986f886c90ab7fffc767879","sha256":"13c7a7c907950381882d16ae8fc9c9acc99494f219dce12cc351e8edf400277e","sha512":"acb1250406879a751cad406bb709b20cd557c3c6958e18013b947aea19e88a6a2bd8a073cf7ecf58df716259c607b069d04730d30ec618e304ff71fc2efc1225","ssdeep":"3072:au8IUu85pdmSO5TZTKUTn9Tn5uNaTn9TnApPedHSpdmSO/iT5T7JlDnDQj3kP/BE:QNz5hakJAW+JNLzxPIWs45lXl","tlshash":"6674f7c4354090acdafbc65dc96a0146735919e670bf87a0b1acb4f9b3d578c387abb0","size":362878,"data":"","first_seen":"2026-07-29T21:31:11.632966Z","last_seen":"2026-08-11T13:33:29.950816Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/CONTACT/c/bs-routes-192fdc43.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f154a7fa7f1766669690629e31d4fc0","sha1":"f29869e8f680cab986a0181f4a5c7850a9deef9e","sha256":"b1eb1c1fdbd0b4c262c77c116be730209ed46f03040ae937e0c4c2ac7a45570c","sha512":"19624ce90f91b06a415630feddc800ce4a1184cb6facf5d377ba12ee3fb160e90e70607a6105129166ff78d16a4de0861ac99ae4d93d5d4895e3a0176c290686","ssdeep":"","tlshash":"0ef0c0482cb434ee062b1a91531f518ecc90c1b7885841008b34983e79a0acfeaf0232","size":512,"data":"","first_seen":"2023-03-07T01:15:49Z","last_seen":"2026-08-12T03:07:35.255879Z","times_seen":22134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/CONTACT/c/bs-_rollupPluginBabelHelpers-5804ec33.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.343Z","timestamp":1785646651343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/CONTACT/c/bs-_rollupPluginBabelHelpers-5804ec33.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 530\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"573040e23518f87db9c6ab3a0baa8d35\"\r\nlast-modified: Fri, 12 Jul 2024 13:50:57 GMT\r\nx-amzn-trace-id: Root=1-669134c0-4dec3f81383257c06ae45a8e\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.106\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":897,"size_decoded":1265,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (830)","md5":"573040e23518f87db9c6ab3a0baa8d35","sha1":"a98af787127749bee4c7fd2629abb206c2029a7f","sha256":"bd65c90b630c1fabec690feb6d8a700295e547009da8fc1aa16f150f969d9233","sha512":"c6d03c4533c4fa5225dd65302711e02af83a15cf6633aaf4b47ded0e8659f90b2dc7be78c9a92ee1690fad9c34a62e0c70e5062e529a20fedd07fd55b8f3fde2","ssdeep":"","tlshash":"171140c832d0b8ea0a92a0d540af6503b12c6a63612c50a8e195a4705cfa81bd5f6f03","first_seen":"2024-07-19T16:45:40Z","last_seen":"2026-08-12T03:07:35.303643Z","times_seen":21394,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/tti/tti.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.354Z","timestamp":1785646651354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/tti/tti.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: E3YfzZ3oMpMeLE/g4LRZAqgDpF7eeSGzmFIOcRRsDqa1UBWhMrIGNxI5CHxj3gEkbAh6qS9gFxQ=\r\nx-amz-request-id: S9K3MR2VNKZ02DY6\r\nlast-modified: Thu, 19 Feb 2026 18:11:29 GMT\r\netag: \"1c56940a864f144fae2eb40ee952cb94\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 0.2.1\r\nx-amz-version-id: GnRAqSJ.VC0mp7LB85NMK_kodthX5D61\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 7570\r\ncache-control: max-age=1800\r\nexpires: Sun, 02 Aug 2026 05:27:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21592,"size_decoded":8220,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21556)","md5":"1c56940a864f144fae2eb40ee952cb94","sha1":"ebfc754ce962a1f9025853f2995b3987f0383d87","sha256":"3c37a4aa3cf6aaae6921a4b750c0e4f81fd338d6878be90b0faf2f921039cb23","sha512":"aef4b08a01d56bd8855653499b375db11d8fd7d67c4bcdc74323236badc47b70ddfedc14ce89828736c63ffe147bf71c14311580296d41b59f11a3305993addd","ssdeep":"384:/z+lhnKuowsx9pGxw57yty3eOHenS934osy:JioFP934Y","tlshash":"a5a2e7cdf6e0b07a13b72072903f520bf236b625180a40a4a279e9f57cb555e5227fbd","first_seen":"2023-10-20T03:52:57Z","last_seen":"2026-08-12T03:07:35.246706Z","times_seen":42374,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","date":"2026-08-02T04:57:33.345Z","timestamp":1785646653345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 02:29:48 GMT\r\nexpires: Thu, 06 Aug 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 268065\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-12T03:58:35.041037Z","times_seen":706659,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f/gpub/c0cc1602e8999bc6/script.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.960Z","timestamp":1785646650960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f/gpub/c0cc1602e8999bc6/script.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 7418\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"1ea18f1556e83a6dddb59013aab7c894\"\r\nlast-modified: Thu, 30 Jul 2026 02:01:37 GMT\r\nx-amzn-trace-id: Root=1-6a6ab080-344e585f6332e2086187b1ab\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.111\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24078,"size_decoded":8154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5701)","md5":"1ea18f1556e83a6dddb59013aab7c894","sha1":"374b304d09908096118d46b0b166f3080c65db67","sha256":"2d12c1ddca66ed020d90186e5198245dfcbfccd23218d524aeeccac5b05e86f6","sha512":"fcef73abd53991de09a4ff0e0e7dc8cd6f06594aea67cf4a9bb62c2a33ef12e7f506c46ac1a377e5f50b7b042aac55f21b7e75b94c10e8f9e2b98e8b07526a17","ssdeep":"384:yYfBT6q6gkB3ZOLuBso9dEwUgkK2kKWYf5PJDJ4n0KrIm/t3hHCLnonJ3R9hlxbc:ymBT6PgkB3ZOLuBso9bkHkJYf5BF40pD","tlshash":"d0b2f82b7611c82ad2821c9f777f3f32399680166147ac1cb95cc9255be287d63e3bc6","first_seen":"2026-08-02T04:58:07.620165Z","last_seen":"2026-08-02T04:58:40.601845Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.945Z","timestamp":1785646650945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38404,"size_decoded":39153,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-08-12T03:11:46.907085Z","times_seen":66385,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":7,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/form/formIdentifiers-99523055.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.276Z","timestamp":1785646651276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/form/formIdentifiers-99523055.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 340\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"df594cd8b37d0680d5d858957921d1f9\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:51 GMT\r\nx-amzn-trace-id: Root=1-6a517bfa-131cbdba656039321bb12009\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.208\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":485,"size_decoded":1076,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"df594cd8b37d0680d5d858957921d1f9","sha1":"3c4eaf647ea26f69ae5cb88273c2628541b8cf91","sha256":"36de6989c237548c20ef7f65c8b6e3a0790da62b3ab4e77c6ca2ee217a091472","sha512":"a8b8563ea5e74e618c6446fe8d238db0dbcb5cebdfd32dfe5de26da8b5eab3a7845391b5c2f4ed43c3c983cad6f2efc109869eeaf7134eb735fdea397f7664d9","ssdeep":"","tlshash":"c7f09e266dad4dd8133e004cc386f1c034494a371254742057b48e617f7ca5f48e67b7","first_seen":"2026-07-13T05:00:16.807101Z","last_seen":"2026-08-10T09:29:07.31034Z","times_seen":1248,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/CONTACT/c/bs-data-aids-e16ec476.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.344Z","timestamp":1785646651344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/CONTACT/c/bs-data-aids-e16ec476.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 587\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"7112942be59d2fe97c50ada22c640fa7\"\r\nlast-modified: Fri, 15 Oct 2021 16:23:00 GMT\r\nx-amzn-trace-id: Root=1-6169aae3-69e5dcdb76c96a2b09cba886\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.111\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1860,"size_decoded":1322,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1809)","md5":"7112942be59d2fe97c50ada22c640fa7","sha1":"64863c928776a59da08b95722d963ed83ad1dd11","sha256":"1bf0ef11c7a47f6399224c0bef519ae58f5756ea422051b3dcbedc643a72abfb","sha512":"d54856fb8be1b96d0908b1f1eaaecbda3e2040681b1112ba8d214f4a36cd269c726297be888e4c5059063ebda105a98bc2e63b25bccb3fbb9f5096f52ae0c2e7","ssdeep":"","tlshash":"433179aace7a0d8f896cca1cb967400900fcd01fc434597536912f1194b7afac56bfd6","first_seen":"2023-03-07T01:15:49Z","last_seen":"2026-08-12T03:07:35.298813Z","times_seen":22967,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/CONTACT/c/bs-routes-192fdc43.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.345Z","timestamp":1785646651345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/CONTACT/c/bs-routes-192fdc43.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 368\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"5f154a7fa7f1766669690629e31d4fc0\"\r\nlast-modified: Fri, 15 Oct 2021 16:23:02 GMT\r\nx-amzn-trace-id: Root=1-6169aae5-51b2977660a72eab2e49bd55\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.111\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":512,"size_decoded":1103,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (464)","md5":"5f154a7fa7f1766669690629e31d4fc0","sha1":"f29869e8f680cab986a0181f4a5c7850a9deef9e","sha256":"b1eb1c1fdbd0b4c262c77c116be730209ed46f03040ae937e0c4c2ac7a45570c","sha512":"19624ce90f91b06a415630feddc800ce4a1184cb6facf5d377ba12ee3fb160e90e70607a6105129166ff78d16a4de0861ac99ae4d93d5d4895e3a0176c290686","ssdeep":"","tlshash":"0ef0c0482cb434ee062b1a91531f518ecc90c1b7885841008b34983e79a0acfeaf0232","first_seen":"2023-03-07T01:15:49Z","last_seen":"2026-08-12T03:07:35.255879Z","times_seen":22134,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Form-38e81dc3.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.347Z","timestamp":1785646651347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Form-38e81dc3.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 13448\r\nx-version: 0.7.3+sha-4aa1798\r\netag: \"19ed5e3951656782d8a20ac6f53bdf32\"\r\nlast-modified: Tue, 16 Jun 2026 18:17:41 GMT\r\nx-amzn-trace-id: Root=1-6a319344-45b47e2b7b2c264c1fd7f82f\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.250\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":58987,"size_decoded":14185,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38594)","md5":"19ed5e3951656782d8a20ac6f53bdf32","sha1":"4326b86a38e0075cc735395a6f2951c805ab02f1","sha256":"ac72dc40c018a1af1dfe20b187254102babf7e5d0268a3956416b93c25802f45","sha512":"c8bb6293db0fafbfff47431545174f32642cdd808ac780f51211381da1e0d9282156079aea44e999151d5e06bf50f578ebf169ab59e4c2f1acbab6439fae91dc","ssdeep":"1536:wbXwjA9wjAyztr64JJGsUv3HWX5Y3kXfkFTdFYTtdFRQTnz+0k/uEy7gfblxRdp6:wbXwjA9wjAyztr64JJd5Y3kXfkldFYTm","tlshash":"5143f9d0750290a94ef9844ec81808417375599e207e96a0f6ecfce6bbd4bdd387e7b2","first_seen":"2026-06-18T04:45:00.175763Z","last_seen":"2026-08-12T03:07:35.292782Z","times_seen":1336,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Recaptcha/recaptcha-loader-c87fd038.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.349Z","timestamp":1785646651349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Recaptcha/recaptcha-loader-c87fd038.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 1516\r\nx-version: 0.7.3+sha-4aa1798\r\netag: \"4fd5272ea5e2d6c4e2538c6c71be588b\"\r\nlast-modified: Fri, 10 Jul 2026 23:11:01 GMT\r\nx-amzn-trace-id: Root=1-6a517c04-5a5aabc856dff4cd2c92754c\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.229\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4692,"size_decoded":2253,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4fd5272ea5e2d6c4e2538c6c71be588b","sha1":"12ddf73808a3d2347ff1c710dc52ee0b1ac524c3","sha256":"34e2225d08ba7015a742a266724fec36bf130264a8e2d65213b8d3d7cf5dc6d6","sha512":"5968a35e89693951ab7e70c287311042e96ffd68e9713ae48529b29aa8e564e6be7bd9831cdb5baae880838231107ce9264a923dcf39a172fa3f55d09da31ce3","ssdeep":"96:ESZiETFAJmtJw7d6lyvsgvp4/TnyOwyQbruPWy0K8y+yQpyQyOmvD8mClvj/CElG:ESZZTaJmE7drp42OtQbrSXDx/Q4NL788","tlshash":"26a1cb28adf390a0cc73a19acb1f96c4f116941ff50cc85639cc87a4af601aec9d1fa4","first_seen":"2026-07-12T06:28:53.235212Z","last_seen":"2026-08-12T03:07:35.273052Z","times_seen":315,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:180,h:180,m","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.677Z","timestamp":1785646651677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /isteam/ip/static/pwa-app/logo-default.png/:/rs=w:180,h:180,m HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 784\r\nx-version: 0.4.8+sha-1da14b6\r\nx-track-origin-referer: https://thinkkayak.com/\r\naccess-control-request-method: GET\r\naccess-control-max-age: 864000\r\netag: 1740452409\r\nx-width: 180\r\nx-height: 180\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nedge-cache-tag: /isteam/ip/static\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":784,"size_decoded":1269,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7dd382dd07119a5a646103e52c910e51","sha1":"5bac5aaaf7bcc59d6699cf94fdb35ddba4421e70","sha256":"9f2ea83e43f7575227a5277ca3aa64d5478116ecad1c8519d9b17523daadb3ea","sha512":"3ada877f9d06d775baf1cc72660d387c8c4a8974544f1914267815fe569007be8571a922e4cf37827200ccb10779f082751abd546fdd8df5e8f5bdac936fb43d","ssdeep":"","tlshash":"fa0175e2e8901a04e863d5de0b043aa8997b19b9abab1665233106bd802211ffb40d00","first_seen":"2023-05-01T17:15:19Z","last_seen":"2026-08-12T03:07:35.274995Z","times_seen":26882,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:32.970Z","timestamp":1785646652970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 02 Aug 2026 04:57:32 GMT\r\ncontent-security-policy: script-src 'nonce-ajIClmmVt-NsyLGFWi8XLA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":54495,"size_decoded":29334,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36079)","md5":"1a7ca3257cb173c27028583362b163d3","sha1":"1373287c16c1681ee557fa2a85e5578866482f23","sha256":"c56439684249ddf3e880fd1a3c50a6fe47ee1a393baf8dbe95a226cf9672d075","sha512":"8db03ffa45c967ccb4774932d08e9e95f77b830db11abf2c59574c7b07f6e54d4c5905ddc4e6912b7c8cc9371181591c6b1ef391ef4dba72f0fb72c098d95c2b","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/sd7wgu/GwbkeLI9479EqI3Yu2ZnyuHC:y+kHlwgOGwLLISacpjMr8KkBIpak","tlshash":"ea337b0808171402cb938ee223da3f74fd6e8254624650b573fd67a7aedbcd7629939c","first_seen":"2026-08-02T04:58:07.630488Z","last_seen":"2026-08-02T04:58:07.630488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.951Z","timestamp":1785646650951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 14792\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:47:45 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14792,"size_decoded":15541,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14792, version 1.0","md5":"c37aa11e5024b0f8908f3742c9a0d9b9","sha1":"b2ccee72f93c83b0be62da9e8bfa77943c481500","sha256":"46d6a0984aa795b764141232671160e61bdcc49e900de67ca6b35bae25b1ebdd","sha512":"dc3f2e177666b9666b0e51399f4e6600246f56865c92ce8a204c2407818b3fa038abb794341cb9d16781451db487aabc1a84e5262619fad90e6886e11fa3e699","ssdeep":"384:XZs0UC5sLGL2sZJCnfayiBoJdSpMzgZqO46EegOHBKagapO:X2C5sLsBmfqSJgMzgUPegOHBRnO","tlshash":"4d62d07198885687b0f5b7348e2f2a6f66f3514028685312acc3fc6cdb5bd4670279ca","first_seen":"2025-09-11T20:37:14.108754Z","last_seen":"2026-08-12T03:07:35.280732Z","times_seen":31764,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":10,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/isteam/getty/2198966747/:/rs=w:1535,m","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.979Z","timestamp":1785646650979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /isteam/getty/2198966747/:/rs=w:1535,m HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 124280\r\nx-version: 0.4.8+sha-26aa854\r\nx-track-origin-referer: https://partners-refunds.org/\r\naccess-control-request-method: GET\r\naccess-control-max-age: 864000\r\netag: 2374349273\r\nx-width: 1535\r\nx-height: 1023\r\nx-isteam-meta: {\"orientation\":1}\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nedge-cache-tag: /isteam/getty/2198966747\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":124280,"size_decoded":124817,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78716726bf222d2f9b06945d21e33b25","sha1":"89e1fd85db83a0e9cbe712b88ea90067c94d7468","sha256":"1d9bff8b5e1036964655bf3713f1becfbd4388bc688146b461e4a858185e27a3","sha512":"dbe9eed937edb3d204a6b36c7b9bc7ec5ce2c17d798afd25eafbb87f8ceb8249321d8aac340d70058cbec1c73ffffe26b291eb541c4a6d7646025a2944beec43","ssdeep":"3072:7JJFHLvIzjgK+I1QNp8m3grFHxOv7pz31uf/yafpynAj:NLvifXQNkDuDID","tlshash":"c1c312fdb12fcb81caf93134aaecdba6c320d549e72344457895b2e1fe63141a70859b","first_seen":"2026-05-17T00:47:19.448262Z","last_seen":"2026-08-02T04:58:40.617247Z","times_seen":5,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-9ae4189f.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.266Z","timestamp":1785646651266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-9ae4189f.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 93149\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"faa8e0f97f848894e111464c8932c74e\"\r\nlast-modified: Tue, 28 Jul 2026 23:33:55 GMT\r\nx-amzn-trace-id: Root=1-6a693c62-531eb3f17f69aece17e99728\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.251\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":362878,"size_decoded":93886,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"faa8e0f97f848894e111464c8932c74e","sha1":"c5d755cb28aa68e5f986f886c90ab7fffc767879","sha256":"13c7a7c907950381882d16ae8fc9c9acc99494f219dce12cc351e8edf400277e","sha512":"acb1250406879a751cad406bb709b20cd557c3c6958e18013b947aea19e88a6a2bd8a073cf7ecf58df716259c607b069d04730d30ec618e304ff71fc2efc1225","ssdeep":"3072:au8IUu85pdmSO5TZTKUTn9Tn5uNaTn9TnApPedHSpdmSO/iT5T7JlDnDQj3kP/BE:QNz5hakJAW+JNLzxPIWs45lXl","tlshash":"6674f7c4354090acdafbc65dc96a0146735919e670bf87a0b1acb4f9b3d578c387abb0","first_seen":"2026-07-29T21:31:11.632966Z","last_seen":"2026-08-11T13:33:29.950816Z","times_seen":35,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.269Z","timestamp":1785646651269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 745\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"852cbc5322260e00b44f2c682f88b2c7\"\r\nlast-modified: Thu, 14 Oct 2021 23:04:41 GMT\r\nx-amzn-trace-id: Root=1-6168b788-04e31f272fd746490d747855\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.110\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":3092,"size_decoded":1480,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3043)","md5":"852cbc5322260e00b44f2c682f88b2c7","sha1":"bcaf229e6134f43eb5f974c9891e4d16faf1d344","sha256":"bae437dbefe58377d88c9d579db7c59f4202f3fbf88866d0005fb375be6b2cd7","sha512":"f031b43f7fa0da001f71ddcffe5e322a94c5f1f52f7c4d67d34880243d9d361ac55c0e5001dd004390867cb31e5def5d4d9282e6e2ecb9aec0e880aa5b786ba3","ssdeep":"","tlshash":"365157d83120895d4c7bc49ec50d0d4a735c56e7217e01b16699b8a8faa1bed793f370","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-12T03:07:35.264766Z","times_seen":39719,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-6afcb3a5.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.273Z","timestamp":1785646651273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-6afcb3a5.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 392\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"ad9c0fc7276cdde4051108ed3bdfa229\"\r\nlast-modified: Thu, 27 Mar 2025 16:12:30 GMT\r\nx-amzn-trace-id: Root=1-67e578ed-4490a18063c39c452d92c344\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.108\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":525,"size_decoded":1127,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (471)","md5":"ad9c0fc7276cdde4051108ed3bdfa229","sha1":"6286388f33b7e1402daa2fd5d2b3cee6e5d1e456","sha256":"9be7a3519ce5b6133e8af79d4480f7091693b0d194ef7048b769c2e129b148ae","sha512":"ff08970e29396800e05850321f4d6dc3d0ffad5accd3129e0cdc53a89bed73aeff73eff2103115a361ad943949a62d2ae9c49565f71b4cc56c7ee6d9be9fb60d","ssdeep":"","tlshash":"55f095e8bd95cb95021404e5c26b7102de7556ff82a855d4f84f412d3c71d572475708","first_seen":"2025-03-31T13:41:59.64409Z","last_seen":"2026-08-12T03:07:35.266861Z","times_seen":26926,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-30d4bb8e.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.292Z","timestamp":1785646651292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-30d4bb8e.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 670\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"8984adc491ab290a6136f5831af04a21\"\r\nlast-modified: Fri, 12 Dec 2025 18:29:25 GMT\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.107\r\nx-amzn-trace-id: Root=1-693c5f04-4372961c282444e46672337b\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1232,"size_decoded":1405,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1184)","md5":"8984adc491ab290a6136f5831af04a21","sha1":"88ce387281e83881d2629f2c4882bcb6a02beaac","sha256":"37c828d7ff8cadc2d664a3491e0dac36f95219dc872be7a6746608971807df0a","sha512":"00b6a7e934d1475f7a4b3378fb3676182d606f5aa2c9e7cc1b6dd72a8fedd45c60951de324aa93e076fb06a055555ddc562135f10f10b1bc33d5edadbbea9cb0","ssdeep":"","tlshash":"1d2181d2a25af0f57e910a0190bb864eb00b0e6a520d18b4c4a92db22cf054bd5febdd","first_seen":"2025-12-13T08:02:06.643991Z","last_seen":"2026-08-12T03:07:35.303676Z","times_seen":13231,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/form/recaptchaTypes-ce199ba5.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.350Z","timestamp":1785646651350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/form/recaptchaTypes-ce199ba5.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 284\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"e64c290468177efa30b4337646886525\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:52 GMT\r\nx-amzn-trace-id: Root=1-6a517bfb-0bf5fd4d6dd6165e43d753cc\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.206\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":389,"size_decoded":1020,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e64c290468177efa30b4337646886525","sha1":"981d54dc35a4ac322b585fa41921b794d65bf1dd","sha256":"348c498661d123117e7662d2c99d9f691d2d09afaedf759f6df40f7f5704c550","sha512":"cfa39fcfc3ea6fb54536d55661b407a8614336067cf40aada7c485d8b165c896e21f6a19fdb2a0a5e1333c8420ef243608de58a1f1dd294efe10047c0e1110d4","ssdeep":"","tlshash":"9de02b377d7e88ec5b75005cc307f1c0b450593a405868601b684f70bbb48afa595ae5","first_seen":"2026-07-13T07:20:34.845677Z","last_seen":"2026-08-12T03:07:35.288208Z","times_seen":1111,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","date":"2026-08-02T04:57:33.359Z","timestamp":1785646653359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 30 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 268826\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40961,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-12T03:58:34.974852Z","times_seen":962229,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.946Z","timestamp":1785646650946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/sourcesanspro/v23/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 14168\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:48:06 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14168,"size_decoded":14917,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14168, version 1.0","md5":"58222dc27e29296c0be582a0ac4f5295","sha1":"9005ebf4a8817487c5921405f02192a3da55620f","sha256":"7bd446d1211046356ed5dc6e99738c5af26f54d25add483bd00147ab2d336e71","sha512":"d436e9275e24f027655489fcd8e63bbd2e4c40f694795b3cfc8012739106fbff7cf90ea9da97ced7b8dd35aaa3eb6f02e1116f4640239a86c60862b6dd8d9d7b","ssdeep":"192:99zcII7GSs/uBRUZcHf8zy7hvwUYMVhr3oPHrAK1FOcGAr8MbeovXb8U:99cuTcHf8zy7lY2rgHr1oA1ZX9","tlshash":"1852cf135ac3a870c69ac1f665bed72d4b01b9cafded1a5270c58d60999e3d34d240f8","first_seen":"2025-09-12T08:48:13.114264Z","last_seen":"2026-08-12T03:07:35.290844Z","times_seen":23341,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":8,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.948Z","timestamp":1785646650948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/sourcesanspro/v23/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 14180\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:42:49 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14180,"size_decoded":14929,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14180, version 1.0","md5":"2b3745d2f49a437d0f85a1d00eaca003","sha1":"43c7f253a60b5e58651fab107d9d1970b06de836","sha256":"b514997508ffc723a0087d6d85c7972bd0f180cd4b190325be978cb87025df36","sha512":"8ef2746d8d20b46552433902673eb639089d65f1394c3dd67c505a0de60ccf17a3405a3bb12b826d420f26461d0dacc864a6cf33393c0802e650b4a31fe7d619","ssdeep":"384:v4bIi3Ux88OhMXzGcLruiMuyBTZvYSYeoeEwIGzJbpw+:gbIi3PzhMX7L641BmIGzJbpb","tlshash":"b852c0b7b3048072f1a79273d759894aee3ba6f343b0b094003604cd59275b18f9aceb","first_seen":"2025-09-11T17:07:37.6714Z","last_seen":"2026-08-12T03:07:35.286904Z","times_seen":27800,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":10,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/toPropertyKey-9bd6a336.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.299Z","timestamp":1785646651299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/toPropertyKey-9bd6a336.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 664\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"510bf0b21eb852ec2589419aabfb4a79\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:51 GMT\r\nx-amzn-trace-id: Root=1-6a517bfa-5f32f6550323fdda2185ba7a\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.233\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2149,"size_decoded":1400,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"510bf0b21eb852ec2589419aabfb4a79","sha1":"93f6bd5ad13b5b8e5c6357d027723852445e11ae","sha256":"9d5460f0ec568a845e8a22d670963ffbb17a96eafd144911f3054f504d2e3d54","sha512":"98755dfcda8cee3bd980e8cff114c0b97df9d8dcc950cd23601cf21de27637391b1d55a39a9e4dfe8903ac248e27fd1959b9545371c9fb7611a52096d82eeebe","ssdeep":"","tlshash":"0d41374974f87056135fa019f36ea0667ce0c4aa01e8e410779ccaf4afa0c3a57e6fc9","first_seen":"2026-07-16T03:13:50.397698Z","last_seen":"2026-08-12T03:07:35.276204Z","times_seen":319,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/traffic2-8b152a1a.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.277Z","timestamp":1785646651277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/constants/traffic2-8b152a1a.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 633\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"bf9beda5a8839f5a124ee2e5e4357225\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:52 GMT\r\nx-amzn-trace-id: Root=1-6a517bfb-7f3c17d2178e223c3811d1af\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.166\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1337,"size_decoded":1369,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bf9beda5a8839f5a124ee2e5e4357225","sha1":"a9deecf2e650e76788474d01f57d194e827a127b","sha256":"f24f96060a006d598a3c94c962544ce07bcb67f9d1f0fa1f8ebfd3fd58907b06","sha512":"df7d3dfd934c55e35f9d686b9d68463ddf0bff00c858005b1bfaba502e62e5773febe450fd3b2cc82a9481fc0b986a936f06e5fee1c65ffa4a57e230d84c4f97","ssdeep":"","tlshash":"8b21d06eb8f914d2122750599bc7b10d742414373298bce8be5d8cac5f9d68c52f6fa0","first_seen":"2026-07-12T06:26:59.02091Z","last_seen":"2026-08-12T03:07:35.252972Z","times_seen":477,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-5ae2d61e.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.288Z","timestamp":1785646651288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-5ae2d61e.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 754\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"e888c8e151a3720b8934f1b94741ea6a\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:56 GMT\r\nx-amzn-trace-id: Root=1-6a517bff-15874b98499b55fe273dc857\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.219\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1869,"size_decoded":1490,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e888c8e151a3720b8934f1b94741ea6a","sha1":"687166e4de6b66d850d2c3e98123bf1c6592d9b0","sha256":"6113ebbbad02214e82be790c1c243b263a0c6080f843eda0653353c6f6bed1b5","sha512":"b6982571c38017ff4eb104efde4c2c6691535d9bdc269f7e16a057e3187e53018dfa65550ba528463e1d845eb8423fbd7af9aa542a630d685bebe9b82d1b680e","ssdeep":"","tlshash":"5d31ec76987811151097800d8b0eb241370569db2bbdabb17fee85352fec61c69f13f8","first_seen":"2026-07-12T06:26:59.011527Z","last_seen":"2026-08-12T03:07:35.272211Z","times_seen":497,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contact.apps-api.instantpage.secureserver.net/v3/recaptcha","fqdn":"contact.apps-api.instantpage.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"216.69.141.20","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.479Z","timestamp":1785646651479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.contact.apps-api.instantpage.secureserver.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 23 Dec 2025 18:34:41 GMT","end":"Sun, 24 Jan 2027 18:34:41 GMT"},"fingerprint":{"sha1":"9F:67:35:AB:45:9D:BA:21:E5:CA:20:57:FF:2C:75:03:83:B6:F2:43","sha256":"17:32:36:C9:D7:7D:DA:E0:54:80:0C:67:19:19:0F:66:9D:8D:57:FD:61:2C:14:8E:FF:E2:6B:4B:D8:6A:FB:7C"}}},"request":{"raw":"GET /v3/recaptcha HTTP/1.1\r\nHost: contact.apps-api.instantpage.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Slay\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 54\r\netag: W/\"36-/JybxMl8Y5PwwWjo7fmcJSDGXLQ\"\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54,"size_decoded":351,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c3981a9867e5550b8d0b15752097180","sha1":"fc9c9bc4c97c6393f0c168e8edf99c2520c65cb4","sha256":"9be601a8246265caf7a9bbf703805a320499234908b81bb8361589ac81ccead7","sha512":"53192ba810cca7398c1b053e87bc7968b38473aa77e9bb112b040bdc9742252b0910a32492710dcae5e9ad80ecc047e8ee66d2d569b5e3ebfb7bb7179afb3ce6","ssdeep":"","tlshash":"46900227905424132518a288cd7cc5a29d8913ae9369561b366a214d0885455a0040d4","first_seen":"2023-04-05T04:18:44Z","last_seen":"2026-08-12T03:07:35.292808Z","times_seen":6624,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":0,"dns":32,"connect":154,"send":0,"wait":158,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","date":"2026-08-02T04:57:33.467Z","timestamp":1785646653467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sun, 02 Aug 2026 04:57:33 GMT\r\ndate: Sun, 02 Aug 2026 04:57:33 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2e2fadb2f94f8aac778ba92f7a42562e","sha1":"ce36065c4b840b15eb7a5db3a0714443e0e589a6","sha256":"f020cafe7019dda7755577ad8ac2e5bdee87534b530f75d65286d31c07420739","sha512":"17bf4fb7bc2d907160bcaf201499ea6aab2c0e413c56a3a2dbeecb3637b41603f62c9155f0dc137709ff8fa0e646a1024f44ba9c6b9d1ba068d227a0fcfd67c9","ssdeep":"","tlshash":"a6b01227a654c4191c000146c827d7ade002412cf67080fc4068dfd402d29a78501800","first_seen":"2026-07-14T22:23:00.817585Z","last_seen":"2026-08-05T14:51:48.379869Z","times_seen":14805,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","date":"2026-08-02T04:57:33.501Z","timestamp":1785646653501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:17 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 316036\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-08-05T14:51:48.383566Z","times_seen":18148,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/markup/ad","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.244Z","timestamp":1785646651244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"partners-refunds.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Thu, 30 Jul 2026 02:00:03 GMT","end":"Wed, 28 Oct 2026 02:00:03 GMT"},"fingerprint":{"sha1":"3C:98:16:B0:43:87:B5:E4:DE:21:8B:FB:BD:1C:71:0F:A6:D8:5F:F9","sha256":"44:2B:79:D8:A7:C4:56:DE:F6:FE:A4:99:E0:53:58:74:E3:71:F1:81:70:7B:7C:8B:FD:D1:47:EE:D2:15:1E:11"}}},"request":{"raw":"GET /markup/ad HTTP/1.1\r\nHost: partners-refunds.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: dps_site_id=eu-central-1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nVary: Accept-Encoding\r\nETag: d41d8cd98f00b204e9800998ecf8427e\r\nLink: \u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin,\u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin,\u003chttps://img1.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://isteam.wsimg.com\u003e; rel=preconnect; crossorigin\r\nCache-Control: max-age=30\r\nContent-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com dev-godaddy.com *.dev-godaddy.com test-godaddy.com *.test-godaddy.com\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Type: text/html; charset=utf-8\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Encoding: br\r\nServer: DPS/2.0.0-beta+sha-cb8eafb\r\nX-Version: cb8eafb\r\nX-SiteId: eu-central-1\r\nDate: Sun, 02 Aug 2026 04:57:32 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31845,"size_decoded":8140,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4765)","md5":"5cad47cf2c1f3764b8dfca478d43db26","sha1":"20a419cb63539bd6d16c48188e0b309982dcf570","sha256":"82be18124d382199b4c25df6af0d3b7616dbc6d82b399d42fa1ffb431e36497e","sha512":"a7e88228612984543f8031267c43c2dd553ef206effac23aea9b9b0608b05123d8ec3f4979cc80195a75a67a4ecbdc45e6d683dbd0900bb5d77746b4d1b4c015","ssdeep":"768:HZ4dk4nGVUftD+ay1q+pF9IIgyVyssTCa9EC/lLhgbP:HZ4vGVUftD+ay1q+pXIIgyVys1sI","tlshash":"0be2f6803ad416bd781b816c2a3b5384732db053d60ced6476ef562cdfd9eb86221b9c","first_seen":"2026-08-02T04:58:07.648482Z","last_seen":"2026-08-02T04:58:07.648482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":868,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl-tti.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.250Z","timestamp":1785646651250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /traffic-assets/js/tccl-tti.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-length: 0\r\nlocation: https://img1.wsimg.com/signals/js/clients/tti/tti.min.js\r\ncache-control: max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-imageToHeaderTreatments-cbda470b.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.260Z","timestamp":1785646651260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-imageToHeaderTreatments-cbda470b.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 273\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"9510613a04bb527b3bf4fd896d972b2e\"\r\nlast-modified: Thu, 27 Mar 2025 16:12:32 GMT\r\nx-amzn-trace-id: Root=1-67e578ef-11d473ef65a1c1ef1f226e23\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.110\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":354,"size_decoded":1008,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9510613a04bb527b3bf4fd896d972b2e","sha1":"0b71e755ed0f246308949cf3aaf30ea448f3ebf9","sha256":"95e1af2d428ffaf9c45bf7a9889c53da406e20e48599ca5efbeea8680cdace1f","sha512":"e963586708a47bca4f0d52cd33f95b37f603926a5812f7cf21a6cf2c6785767114a0840438f3f5b3739bb573df8056cdd76512e1ca2e950b6155d5fa901d1b7f","ssdeep":"","tlshash":"dae0c0cd78f0e48b4b311494811f246a60ea513eb2026c00fb064d2238b140ba0b271b","first_seen":"2025-03-31T13:41:59.628873Z","last_seen":"2026-08-12T03:07:35.271556Z","times_seen":25812,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/assets/reamaze-godaddy-loader.js","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.377Z","timestamp":1785646651377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 17 Jul 2025 20:54:16 GMT","end":"Tue, 18 Aug 2026 20:54:16 GMT"},"fingerprint":{"sha1":"95:C6:DA:9F:AF:CA:EF:87:7E:36:1A:38:18:5D:94:C6:B2:F0:9E:30","sha256":"86:29:30:4F:A2:4A:3D:4D:DD:E8:F8:F3:90:7D:BB:C6:D9:38:3F:36:D3:F8:BA:B7:AE:70:44:B2:2F:FA:53:FD"}}},"request":{"raw":"GET /assets/reamaze-godaddy-loader.js HTTP/1.1\r\nHost: cdn.reamaze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 339\r\nserver: cloudflare\r\nvary: Accept-encoding\r\nlast-modified: Fri, 31 Jul 2026 19:51:43 GMT\r\netag: \"153-657ed848d91c0\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nage: 4517\r\ncf-cache-status: HIT\r\ncf-ray: a24a80932e100b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":688,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (560), with no line terminators","md5":"18adec0158629b490c5bdc3c98f1ef39","sha1":"e77456bdaeaeeb29234cbd90026e7d14775ea1ba","sha256":"1b4a75ceb53f86ae724560e965a08a46009a31646a1c3e1eeea4e22b7ce6f322","sha512":"572c433559c3214c6cd9031d2a8090011d5755d7ba58af3e4d3c6c33c1b95b08317ef2cd63cf81a1587397962874d0a2a6bc2c2a73e7530abcbd8cde13064d79","ssdeep":"","tlshash":"52f08b457f555520926915a930b7c3e8791114323b074090d39fa8f435bcea5480bf4d","first_seen":"2025-03-29T13:11:15.079517Z","last_seen":"2026-08-11T22:11:37.630807Z","times_seen":19905,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":7,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.739Z","timestamp":1785646651739,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://partners-refunds.org/\r\nContent-Length: 1207\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1207,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"3dfa753df91b42a1b791bbdc6741fbed\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.2\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"3dfa753df91b42a1b791bbdc6741fbed\",\"host\":\"partners-refunds.org\",\"path\":\"/\",\"location\":\"https://partners-refunds.org/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"6567ab2c-79ec-4533-9d17-7436bb0f6c43\",\"sessionId\":\"6567ab2c-79ec-4533-9d17-7436bb0f6c43\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/page-view/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-08-02T04:57:31.266Z\",\"forensics\":{\"traceIdAdopted\":false},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"IPv2\",\"websiteId\":\"a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f\",\"pd\":\"2026-07-30T02:01:36.104Z\",\"meta.numWidgets\":5,\"meta.theme\":\"layout13\",\"meta.headerMediaType\":\"Image\",\"meta.isOLS\":false,\"meta.isOLA\":false,\"meta.isMembership\":false},\"customProperties\":{}},\"producerEventId\":\"239570df-baf3-4606-aa3f-1268629d513e\"}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 292226926836436010386370803596300706832\r\nx-envoy-upstream-service-time: 85\r\nx-error-info: 0\r\nx-request-id: 5922d1d2-f34b-43fa-b349-86c0c1171990\r\nExpires: Sun, 02 Aug 2026 04:57:31 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 02 Aug 2026 04:57:31 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-12T03:56:33.515805Z","times_seen":759268,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":206,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","date":"2026-08-02T04:57:33.084Z","timestamp":1785646653084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:17 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 316036\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383076,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-08-05T14:51:48.383566Z","times_seen":18148,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.955Z","timestamp":1785646650955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 14724\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:43:54 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14724,"size_decoded":15473,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14724, version 1.0","md5":"b8be966e335e865e3c73faa8cce0ed35","sha1":"d0cd995e87f5bfb0206759b83e5ef25676d0edd8","sha256":"06b675a649489d21b7fd33f19b1c6d37e8bd778ded07ecfec26bbc8f11e694f4","sha512":"2257e0a09a86666b280d44ae551a33d17a6072043a2c38f0bb905847b66217809870c8cd6ab3a6ebce3e04b2ff79bedd11f1b18c7d65c231f8c9f21ed8a26e5e","ssdeep":"384:wK2JDEZSzIQA8yHGXMXvQDxyrGCQYamlyFlGWD:zrB8y0zKmYasKh","tlshash":"f962c0d2c64154daea05b9b35f612538bc99bf462054fd0796cbe41df7230a8fe382e2","first_seen":"2025-09-11T17:07:37.682239Z","last_seen":"2026-08-12T03:07:35.291475Z","times_seen":52711,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-d0652cc9.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.280Z","timestamp":1785646651280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-d0652cc9.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 7511\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"ccd1775ab6f07dcc870700da0022a22a\"\r\nlast-modified: Mon, 22 Jun 2026 16:54:17 GMT\r\nx-amzn-trace-id: Root=1-6a3968b8-3b0e6b2e7b90990e7200653a\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.250\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24748,"size_decoded":8247,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21738)","md5":"ccd1775ab6f07dcc870700da0022a22a","sha1":"6819665b286a676d6fc9fc7ad745535cefb66bb8","sha256":"fe1e94da7f48a04fc31751a80b20301674ed2f4efa25724c6da1b54e39f922b4","sha512":"3663c0653c701c29895b4cd519f3cfec2d664f3307e3421f0b8f81b6c56f01951e289ec25a143c1b838c6b77b4c40620524ef54bb056c39e2aff9163e0a4161c","ssdeep":"384:PVy/GQzPMu6bOeIiLgoJZXjI9vsBqrqYZSgsWu3sCLCpgNJe9plOc9:tMF7MtbzLDJVcAqrqYZSgsGiSgNgblb9","tlshash":"39b20816339165294ed2838695ee8501f2ed1e1de615b0ac73fb88ceab4d404632ffbd","first_seen":"2026-06-23T10:07:52.135829Z","last_seen":"2026-08-12T03:07:35.285602Z","times_seen":1654,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:32.240Z","timestamp":1785646652240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://partners-refunds.org/\r\nContent-Length: 1897\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1897,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"3dfa753df91b42a1b791bbdc6741fbed\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.2\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"3dfa753df91b42a1b791bbdc6741fbed\",\"host\":\"partners-refunds.org\",\"path\":\"/\",\"location\":\"https://partners-refunds.org/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"6567ab2c-79ec-4533-9d17-7436bb0f6c43\",\"sessionId\":\"6567ab2c-79ec-4533-9d17-7436bb0f6c43\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/impression/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-08-02T04:57:32.132Z\",\"traffic\":{\"pageLevelProperties\":{\"ap\":\"IPv2\",\"websiteId\":\"a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f\",\"pd\":\"2026-07-30T02:01:36.104Z\",\"meta.numWidgets\":5,\"meta.theme\":\"layout13\",\"meta.headerMediaType\":\"Image\",\"meta.isOLS\":false,\"meta.isOLA\":false,\"meta.isMembership\":false},\"eid\":\"ads.adPlacementKey_gd-wam-pos1.omsId_baseline/psName_WAM_BANNER_V1/impressionId_221c058ce09f4a489b221f90eecf068a\",\"customProperties\":{}},\"producerEventId\":\"40882ba3-152d-4632-bc1a-474704badde6\"}},{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/impression/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-08-02T04:57:32.134Z\",\"traffic\":{\"pageLevelProperties\":{\"ap\":\"IPv2\",\"websiteId\":\"a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f\",\"pd\":\"2026-07-30T02:01:36.104Z\",\"meta.numWidgets\":5,\"meta.theme\":\"layout13\",\"meta.headerMediaType\":\"Image\",\"meta.isOLS\":false,\"meta.isOLA\":false,\"meta.isMembership\":false},\"eid\":\"ads.adPlacementKey_gd-wam-pos1.omsId_baseline/psName_WAM_BANNER_V1/impressionId_221c058ce09f4a489b221f90eecf068a\",\"customProperties\":{}},\"producerEventId\":\"7b0b31ba-09cf-4e22-8855-c6df18a51c3b\"}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 154222240487283994421373311230498890207\r\nx-envoy-upstream-service-time: 76\r\nx-error-info: 0\r\nx-request-id: da65df48-80e9-4832-83f3-3aca68f0709f\r\nExpires: Sun, 02 Aug 2026 04:57:32 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 02 Aug 2026 04:57:32 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-12T03:56:33.515805Z","times_seen":759268,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.7.1.0.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.942Z","timestamp":1785646650942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /ceph-p3-01/website-builder-data-prod/static/widgets/UX.7.1.0.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 128901\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"65011531a77658f5a7b578002cd9c264\"\r\nlast-modified: Tue, 28 Jul 2026 22:22:29 GMT\r\nx-amzn-trace-id: Root=1-6a692ba4-679dd69e78215b3f7f775729\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.251\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":418950,"size_decoded":129639,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65270)","md5":"65011531a77658f5a7b578002cd9c264","sha1":"5febf12deebeeb746b773ddc5166957efc421263","sha256":"4620d72e13ec26c030ce305a42a92b0374d47dd592b8fe16084a6d8b6ce4f6b2","sha512":"37d4fee57385829254e2b8075bd0f254495c85f2ab673e4f1b526bfaa9cd733ccbca981e4355177de48312854398c45b892c9efe4bf0eb5eaf074c904fd56faa","ssdeep":"3072:5XimkZbrg7xDUYzqz/UmCDsm/sMAgOZjBEQEiklhSiL9e3e+rLudbBv/xGZFEoyi:5z6brwUYGzcQejikuigRSpBHb/JXRq","tlshash":"b4943bd83592f4a157a301a5403f4506f33d6d3b640da490f3a2edd6b8a49dea07bf3a","first_seen":"2026-07-31T19:47:19.864403Z","last_seen":"2026-08-11T13:33:29.983602Z","times_seen":29,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":8,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.962Z","timestamp":1785646650962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: YIy0Vb7PsKceT/8Z6VS+0oKYZ5GTFBIWSs5UPpghGTbSTiKmkumqbtEsbkF4xkbXTnQwpRLm5no=\r\nx-amz-request-id: GTHV8R2A87XY4J95\r\nlast-modified: Wed, 27 May 2026 17:27:10 GMT\r\netag: \"8a37dab530d4cba8ef9134c279c20612\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.2\r\nx-amz-version-id: V1QpCm1bxgHgw4G1nDhX4YJuFGsOtoK3\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 21664\r\ncache-control: max-age=1800\r\nexpires: Sun, 02 Aug 2026 05:27:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":106502,"size_decoded":22315,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8a37dab530d4cba8ef9134c279c20612","sha1":"ef687d672e515d41f8b9c6b23e8c66b117a609c3","sha256":"5c16c1b3a290dd98b67c97387769f0ba4ce1a68fc5a584f603d85eec8ecfa499","sha512":"f08cbc1d2bea4b6bef0f153e83a74edfe4abf9c6f39aaadb35a6c167efd6f667b151b7154ab6e444b75420335488d27d3a33ec6e6e2c3d953a41d0a03ce563f9","ssdeep":"1536:uzSGNmZEfRDJYW/3TV4vlJHjaBaR02YX25x6JR:kD6W/WFu","tlshash":"67a3a688f6a1f07142e76165412f010bf379a965b0aed0d4e725e8f8adf85ce8173f29","first_seen":"2026-05-27T17:58:47.761284Z","last_seen":"2026-08-12T03:07:35.287177Z","times_seen":19021,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-dc689f22.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.291Z","timestamp":1785646651291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-dc689f22.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 621\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"a3dd10b90c8e60bec1f22e13b47ad695\"\r\nlast-modified: Thu, 05 Dec 2024 21:01:29 GMT\r\nx-amzn-trace-id: Root=1-675214a8-540b10c02525f5400941e2e2\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.111\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1904,"size_decoded":1356,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1854)","md5":"a3dd10b90c8e60bec1f22e13b47ad695","sha1":"e8793d96240098e5b0f801c19e70644388c3c6b9","sha256":"ebaa7c65b7616917ed8f17f0136faa8e50b376d1762d2a15cb51950cc1df2370","sha512":"6634adc4ec9323e2017152a8d02054f4b622328c608f7048c2fd3655ec8ec7ec10c353830374bfa6b2101bcdc39273010c7106d05af743cbbc9b1e521c99b22b","ssdeep":"","tlshash":"4e419d21cea51cea7fa25679bca1155e059d00bf76c429b037fa5f1035a0cb2c0637b7","first_seen":"2024-12-09T12:25:58.824013Z","last_seen":"2026-08-12T03:07:35.295793Z","times_seen":29736,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.296Z","timestamp":1785646651296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 674\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"32c08a365698a3ca8b66d691948a115d\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:48 GMT\r\nx-amzn-trace-id: Root=1-6a517bf7-6f3d373515bf51cc4e3ff814\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.231\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1449,"size_decoded":1410,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"32c08a365698a3ca8b66d691948a115d","sha1":"e374f8462dedcb0242f7355046b189ad56b7df13","sha256":"b62fa6002bcca4baebd6de702a4333bfd2e094b4d578e577b1ad60f72e118cfa","sha512":"cf0ad9e290ed385b1607852596fab4d08d18adaafa337898b748fe09c67c0fae73192c8b3dacb9ce1be2dd4f7b1bf98b2fa7d0dba6e8bd9ebc3f3ea2cf297988","ssdeep":"","tlshash":"023137c5fadcd95103b820d99a2a7015f8b8fd7702bce8a18d1c89f094f012f52969e5","first_seen":"2026-07-13T05:00:16.814373Z","last_seen":"2026-08-10T09:29:07.292118Z","times_seen":1340,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-cd72c02c.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.252Z","timestamp":1785646651252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-cd72c02c.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 2795\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"10eb836b2fbfadf389ba5797a65bfe71\"\r\nlast-modified: Thu, 23 Jul 2026 21:11:37 GMT\r\nx-amzn-trace-id: Root=1-6a628388-71e949630f4963d10f826e90\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.251\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8231,"size_decoded":3531,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8161)","md5":"10eb836b2fbfadf389ba5797a65bfe71","sha1":"521a65b3d413ad1589ae9ba9feef78a713c333b7","sha256":"1267129ad5dc76763ddc20a97bca66880af535b0a197bc06ec89dfa3e09f5730","sha512":"e2cf47bf99815d479a4be81dcf703253bf2c06a8fdc41851edaa703f9313f32a00f2693cd39e39087f0382398cc0c4f7af3f90fae019871786d314f97c328e8a","ssdeep":"192:6LHHDkHAnKzW6rumM6feyY3LRejwhVYIJEe4mHpBgKnYJsvIFO/Es5KrzNqNj:6LDhWW6rumVfnY3LRejwhVYIJymHpCK9","tlshash":"d30277ee37896c15e6d3425aba99440172a05992a129dbedff7f1e7f32b08872131370","first_seen":"2026-07-24T06:30:01.062604Z","last_seen":"2026-08-12T03:07:35.284522Z","times_seen":52,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.268Z","timestamp":1785646651268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 259\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"acd4f2b6117e5054fc9bf848ae8121ca\"\r\nlast-modified: Tue, 18 Oct 2022 15:47:52 GMT\r\nx-amzn-trace-id: Root=1-634ecaa7-6a4fef5d742e08b052d431ff\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.110\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":324,"size_decoded":994,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"acd4f2b6117e5054fc9bf848ae8121ca","sha1":"ae4d5f41d854ba8d99a4a1ec6ee6d6c3c0a859b8","sha256":"66774f89fcfa5674be9aef60e3fe3cb81e4dd88246bde4e5392df8b99fefd4db","sha512":"906fc9144d4ab81e8000cbe4a7af7aff775464347449193337e8738d705888c02b9476e083b3b67bdb3cbc312aac4644c10737bc1fc5f9f08b38f5f45a2410f9","ssdeep":"","tlshash":"15e07d8855f5fcf018340089470fa107cddbc0fe9a282098c5c13564297088fe1e6b97","first_seen":"2023-03-08T14:29:26Z","last_seen":"2026-08-12T03:07:35.289818Z","times_seen":33647,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-8f862543.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.274Z","timestamp":1785646651274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-8f862543.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 415\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"7a998555b4353ee7c006f3b5921e9e6b\"\r\nlast-modified: Thu, 14 Oct 2021 23:04:39 GMT\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.110\r\nx-amzn-trace-id: Root=1-6168b786-39b7f1601bdb10cc0442a144\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":792,"size_decoded":1150,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (736)","md5":"7a998555b4353ee7c006f3b5921e9e6b","sha1":"1fa928cfbddb460938abbedcdd1419e9a184dbb6","sha256":"3872b0c2f5b121a4413f4401ac7290bdce7cdf9d11b3ce6f0dab617c0eb7ab98","sha512":"5c12eb989a917a5f9df8fdf4f53538e2f4af7bfe87749b2f73ef546b8ae2bce73d5b093de570156128b4910c8ec0cb1bfa10dbc71b27811a51b485fa6955a0d2","ssdeep":"","tlshash":"dc018e6609317d765893103f620a816241a5496f33eb01fedf7122183eb0f1f7717788","first_seen":"2025-12-15T12:08:43.741965Z","last_seen":"2026-08-12T03:07:35.295114Z","times_seen":10364,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/utils/form-1fa99f0a.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.347Z","timestamp":1785646651347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/common/utils/form-1fa99f0a.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 596\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"c53cce727e7ddf45f074b2016e10007b\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:55 GMT\r\nx-amzn-trace-id: Root=1-6a517bfe-6ec03993084b86fa47cdc0dc\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.217\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1531,"size_decoded":1332,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c53cce727e7ddf45f074b2016e10007b","sha1":"bff0ae43df137e9b4a13a52f3c67beb6b75d96bc","sha256":"ceaba6398316c81ed7a08bf00d17d6fe3cd1a0ef615b83c99a0a777b10ae7462","sha512":"2c8d39cbbd45d6dbfd36ffca6decf4bcd0ac676e13c259e2a16553122427ebc8083fa38facf85be112f57b64d3955b7a21682c9fc07575ce19ebe93294ad358d","ssdeep":"","tlshash":"bd31973e4db1245c8a63267b434ff2193b6169237488e9d0ffbcda036f0190476e4aa9","first_seen":"2026-07-16T12:27:59.756246Z","last_seen":"2026-08-12T03:07:35.304218Z","times_seen":1091,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","date":"2026-08-02T04:57:33.083Z","timestamp":1785646653083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 21:55:21 GMT\r\nexpires: Wed, 28 Jul 2027 21:55:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 370932\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"62429037d6285782824616384b26132e","sha1":"b126600bf1a3041616793c05c1ce749dad01d952","sha256":"31d79d19622679a61ce0ee180498b570d78cf2202cfad7f25d991049d780f564","sha512":"9dc9ee85a14baef9a9c9881cd82c92b086b4d8c902e36dcaeacdae5627da8f9de5791c8305b747b16d512e46f4cae5949d4afaa9f80a35d9395c4623451d13f6","ssdeep":"1536:a7Rpgh9C9ToL9gTNfWNfK4RxMnHZzhXwWx7W1bx7:a7ArC9ULiTYNC4Rs9Xi","tlshash":"eb838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-07-14T22:23:00.889376Z","last_seen":"2026-08-05T14:51:48.426909Z","times_seen":15955,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_\u0026co=aHR0cHM6Ly9wYXJ0bmVycy1yZWZ1bmRzLm9yZzo0NDM.\u0026hl=en\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jixgh55s6jml","date":"2026-08-02T04:57:33.358Z","timestamp":1785646653358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 30 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 268826\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40961,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-12T03:58:34.974852Z","times_seen":962229,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/MESSAGING/bs-Component-5c8ab323.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.253Z","timestamp":1785646651253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/MESSAGING/bs-Component-5c8ab323.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 4183\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"ce4887cc6309b903625e9d0495fd2e4b\"\r\nlast-modified: Thu, 18 Jun 2026 18:28:25 GMT\r\nx-amzn-trace-id: Root=1-6a3438c8-676ff56e5d843ef0746fdb28\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.250\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15227,"size_decoded":4919,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15176)","md5":"ce4887cc6309b903625e9d0495fd2e4b","sha1":"bd9b3468d2d780431813fe6ceb7a578604366262","sha256":"743aeac35f7216924e3092a094880c24ca661937eee8d066ed22f21034458c48","sha512":"6160350bd5a9e8e975ccebedfbacb5d487e1bd097a69dcb268dee567bdaf6f9145656a24d0489c76bd8b9c8a77a52305e81bb69173b56380271cfcbf10f793af","ssdeep":"384:LBlUJGYkn2tr2eX4f5d4jSlKu4OiVs1i94aQhrd6u4b4iEHj74O84NVXIMv/huHn:L+knDq4f5d4jSlKu4OiVCi94a8Qu4b4G","tlshash":"e3623184bd109519ccbfc41ed69926c23285549b60be97b1b0dcf4b9a3c879c3ca5bf1","first_seen":"2026-06-20T01:34:05.756497Z","last_seen":"2026-08-12T03:07:35.295445Z","times_seen":1704,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-52fbaa26.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.262Z","timestamp":1785646651262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-52fbaa26.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 595\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"4ed0e00319b4a29061dee968328ea9a1\"\r\nlast-modified: Thu, 27 Mar 2025 16:12:34 GMT\r\nx-amzn-trace-id: Root=1-67e578f1-4c46662263261bbc1aeb0be9\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.107\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":886,"size_decoded":1330,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (839)","md5":"4ed0e00319b4a29061dee968328ea9a1","sha1":"be1b5444ba718e30cfbab32055657655e84ff629","sha256":"f404f79872e84b6c1b26b7a8636a153237e576c168231ebed3638cf3b689a8d0","sha512":"972d765a99d01f939d52efe01fd450b22e2865c0f59d6f6a5072c55e837dff975ebab57b265dea40ea56bd8eed3ab6d6d5b944e302a17330901eabeddfd733b4","ssdeep":"","tlshash":"4511006619f84e66357f027d2a02980320a8f0bb5050597896f50b58bef589f84997e9","first_seen":"2025-03-31T13:41:59.630397Z","last_seen":"2026-08-12T03:07:35.274293Z","times_seen":26926,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.293Z","timestamp":1785646651293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 191\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"8f12765eb30fbdcfcdc116d13f7fc272\"\r\nlast-modified: Thu, 28 Jul 2022 17:59:29 GMT\r\nx-amzn-trace-id: Root=1-62e2ce80-4ef8fc4a33c151912970138f\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.107\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":221,"size_decoded":926,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"8f12765eb30fbdcfcdc116d13f7fc272","sha1":"506e45b7d3930756eacce0dad449a3c8cdb3eac6","sha256":"265995eb76326e95613750f6f6570b850f5c22280d262de9b9632a16ceb98b9b","sha512":"7aa2f396b105bccf2b943fd2ac60929d8bf3a0eb8574b77451cb29816df8acdcd07694b526d7e4585f849dfda3a0fe6e95661179e13f682dbf54098d98154bfb","ssdeep":"","tlshash":"25d0a7da1db08c91143115674227e102446252bfc375113588c33a243974c17a162e8a","first_seen":"2023-03-07T01:15:03Z","last_seen":"2026-08-12T03:07:35.2978Z","times_seen":41577,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.298Z","timestamp":1785646651298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 222\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"e32074de0e236606c951919219e84d83\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:49 GMT\r\nx-amzn-trace-id: Root=1-6a517bf8-2a759bab4b7f08c4191a1f34\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.208\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":316,"size_decoded":958,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e32074de0e236606c951919219e84d83","sha1":"819d74fcdf5d7ba9e9f3e0cc280917bdd30b7a7a","sha256":"c82c443d63f09495807b95430e901b713c65cfea48e2d53e18c291f3eaa41015","sha512":"058b60dc03de83b16feb07cfc8768f59a27dab65620c44496e88c3cad455aecb1750af3b83bbb15a9af7625efa38e118385e8d602c194299124a76ffcd11c09a","ssdeep":"","tlshash":"eae0261d0d7740e808bb60dcc30bf914b51918b7c0bc10a20d18a79170e1aaf5552d34","first_seen":"2026-07-13T05:00:16.787043Z","last_seen":"2026-08-10T09:29:07.330055Z","times_seen":1346,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-c06d2bc9.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.301Z","timestamp":1785646651301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-c06d2bc9.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 612\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"0dd21cc0c8ada625e47f0a16a29b3a9b\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:49 GMT\r\nx-amzn-trace-id: Root=1-6a517bf8-40e34eb37764c36b0a13ccd1\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.208\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1260,"size_decoded":1348,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0dd21cc0c8ada625e47f0a16a29b3a9b","sha1":"777a8f43b4b0ac811292e843a780f05edb71784d","sha256":"3e7bcfdf95bb35c88c8e7993f75ac8034ef238fed5a3ab5009b5802a64cf936d","sha512":"25a04e0ca9a35eb649262e38ae50c8fbdde54a3e732230e4af16c05b8f2bae91f1447bc6257353aa23ffe2dac9da9315ad7da0278678fa9430be108cc9cafeaa","ssdeep":"","tlshash":"5d21108c39d2a5a51563e028861fa802f1189ca310bcec60769ce260bf5287a87f6646","first_seen":"2026-07-12T06:26:59.014443Z","last_seen":"2026-08-12T03:07:35.298168Z","times_seen":497,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.741Z","timestamp":1785646651741,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://partners-refunds.org/\r\nContent-Length: 2011\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2011,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"3dfa753df91b42a1b791bbdc6741fbed\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.2\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"3dfa753df91b42a1b791bbdc6741fbed\",\"host\":\"partners-refunds.org\",\"path\":\"/\",\"location\":\"https://partners-refunds.org/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"6567ab2c-79ec-4533-9d17-7436bb0f6c43\",\"sessionId\":\"6567ab2c-79ec-4533-9d17-7436bb0f6c43\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/rigor/page-navigation/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-08-02T04:57:31.490Z\",\"navigationType\":\"navigate\",\"timing\":{\"navigation\":{\"connectEnd\":1785646650509,\"connectStart\":1785646650453,\"domComplete\":1785646651486,\"domContentLoadedEventEnd\":1785646651273,\"domContentLoadedEventStart\":1785646651268,\"domInteractive\":1785646651257,\"domLoading\":1785646650676,\"domainLookupEnd\":1785646650453,\"domainLookupStart\":1785646650379,\"fetchStart\":1785646650368,\"navigationStart\":1785646650348,\"requestStart\":1785646650509,\"responseEnd\":1785646650560,\"responseStart\":1785646650530,\"loadEventStart\":1785646651486,\"loadEventEnd\":0,\"pageLoadTime\":1138,\"domContentLoadedTime\":920,\"domInteractiveTime\":909,\"pageDownloadTime\":30,\"domainLookupTime\":74,\"serverResponseTime\":21,\"serverConnectionTime\":56,\"redirectionTime\":20},\"paint\":{\"largestContentfulPaint\":452}},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"IPv2\",\"websiteId\":\"a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f\",\"pd\":\"2026-07-30T02:01:36.104Z\",\"meta.numWidgets\":5,\"meta.theme\":\"layout13\",\"meta.headerMediaType\":\"Image\",\"meta.isOLS\":false,\"meta.isOLA\":false,\"meta.isMembership\":false}},\"producerEventId\":\"6c0dbfd1-b8b0-495c-a5fb-5e70211115d6\",\"contentLoadType\":\"hard\",\"response\":{\"transferSize\":15981,\"encodedBodySize\":15681,\"decodedBodySize\":90718}}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 36280687426111924971188380449750417759\r\nx-envoy-upstream-service-time: 82\r\nx-error-info: 0\r\nx-request-id: b4cd9143-f5dd-4e71-9ea0-1b03141e7815\r\nExpires: Sun, 02 Aug 2026 04:57:32 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 02 Aug 2026 04:57:32 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":507,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-12T03:56:33.515805Z","times_seen":759268,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":0,"dns":10,"connect":2,"send":0,"wait":228,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.956Z","timestamp":1785646650956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 37956\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Thu, 04 Sep 2025 17:09:22 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37956,"size_decoded":38705,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37956, version 1.0","md5":"311d352d93230ece04b34eaa8ad10d08","sha1":"a5ec54920b589ebe2af3bc3bb7754a476db68abf","sha256":"06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879","sha512":"c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a","ssdeep":"768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT","tlshash":"1b03f1b385431ca543842f3397cf967cc978fa55ab843b885823eccc14aa6adcdc0764","first_seen":"2025-09-07T23:16:26.412091Z","last_seen":"2026-08-12T03:07:35.276662Z","times_seen":41974,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.294Z","timestamp":1785646651294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 244\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"daa79ad7558674f6a12d962abf47f2f6\"\r\nlast-modified: Thu, 14 Oct 2021 23:04:37 GMT\r\nx-amzn-trace-id: Root=1-6168b784-1438c006715eea557e6c9f7f\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.110\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":304,"size_decoded":979,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"daa79ad7558674f6a12d962abf47f2f6","sha1":"03eea0ebebd11ec14cfa5a651eb0aca2604829a7","sha256":"604281887cd770ed21601933e9636a7a9c8a57a30d7d796ae7d760eef64d5089","sha512":"b335ebcb0c982398c56d9a5f68f5d4e36a850ab139976bd94354c7cd18f1f370866a74f46fcd399f46e410d59af7fba890a17003bb4fd456dd43a6de531d28f9","ssdeep":"","tlshash":"fae0c2ce19a0d8d257b2049bc40bf90280e9c8ff421434a4a9113ea4acb5c0f7e7d9ce","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-12T03:07:35.301421Z","times_seen":41729,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/favicon.ico","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.679Z","timestamp":1785646651679,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"partners-refunds.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Thu, 30 Jul 2026 02:00:03 GMT","end":"Wed, 28 Oct 2026 02:00:03 GMT"},"fingerprint":{"sha1":"3C:98:16:B0:43:87:B5:E4:DE:21:8B:FB:BD:1C:71:0F:A6:D8:5F:F9","sha256":"44:2B:79:D8:A7:C4:56:DE:F6:FE:A4:99:E0:53:58:74:E3:71:F1:81:70:7B:7C:8B:FD:D1:47:EE:D2:15:1E:11"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: partners-refunds.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nCookie: dps_site_id=eu-central-1; _tccl_visitor=6567ab2c-79ec-4533-9d17-7436bb0f6c43; _tccl_visit=6567ab2c-79ec-4533-9d17-7436bb0f6c43; _scc_session=pc=1\u0026C_TOUCH=2026-08-02T04:57:31.266Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nVary: Accept-Encoding\r\nLink: \u003c//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.7.1.0.js\u003e; rel=preload; as=script; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin,\u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin,\u003chttps://img1.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://isteam.wsimg.com\u003e; rel=preconnect; crossorigin\r\nCache-Control: max-age=30\r\nContent-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com dev-godaddy.com *.dev-godaddy.com test-godaddy.com *.test-godaddy.com\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Type: text/html;charset=utf-8\r\nContent-Encoding: br\r\nContent-Length: 13146\r\nServer: DPS/2.0.0-beta+sha-cb8eafb\r\nX-Version: cb8eafb\r\nX-SiteId: eu-central-1\r\nDate: Sun, 02 Aug 2026 04:57:31 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GoDaddy Website Builder:8.0.0000","description":"","website":"https://www.godaddy.com/websites/website-builder","common_platform_enumeration":"","icon":"GoDaddy.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68956,"size_decoded":15070,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23152)","md5":"5bcd329752a2398202a8134a75467f3b","sha1":"d2e3e719e93e5550a0030d2e66aa2c433c783794","sha256":"5f1de453912e7515f72ab1670dd8bdd397aa5a7e416b74cd5ccaf3060d476d5d","sha512":"4aacc7e726e7485f58314b190996a16774206ebfd240e6c28d7c3785676a71e1ce6e043aa1cf98b22a50a6f3974e214699ad2c618d1567e38fb06928c1bed8aa","ssdeep":"1536:EqAJSscdYLfjl5q8gF9aA8Hpz5M7LN3NvCpRO:E1J1bq8gDaA8Hpz4N3NvCpRO","tlshash":"a063f69312051218c2630de562e67fa5720ba926d952c3749bfd4c3c9fd686a03b1f7f","first_seen":"2026-08-02T04:58:07.668665Z","last_seen":"2026-08-02T04:58:40.620975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Recaptcha/badge-2500008a.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.279Z","timestamp":1785646651279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Recaptcha/badge-2500008a.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 373\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"910416df6bd0c15f6d4667e23125ecc3\"\r\nlast-modified: Fri, 10 Jul 2026 23:11:01 GMT\r\nx-amzn-trace-id: Root=1-6a517c04-006c79c80aea550134ec3179\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.222\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":555,"size_decoded":1109,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"910416df6bd0c15f6d4667e23125ecc3","sha1":"0a4f41005fc4109c1b68bf5e8b9be1aba25d5aad","sha256":"16d859259f0125cb3d1f6ca1cd2cbe9618dd69230424ea221a3b761d75511bf9","sha512":"d2c61fda3d827ca262faf92d2e7570e0caa844e241d8f8d89fa405a0ad106bc2c1f43d3495f9ef0fe18b2567425624de09c9fe88c3d1363cea13ad6f4408f729","ssdeep":"","tlshash":"d6f0c6293d6540e5095b404cc31af5d572494c77c1bd58701a494fb07fb869f65f16b0","first_seen":"2026-07-12T06:26:59.055571Z","last_seen":"2026-08-12T03:07:35.297131Z","times_seen":459,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partners-refunds.org/","fqdn":"partners-refunds.org","domain":"partners-refunds.org","tld":"org"},"ip":{"addr":"76.223.105.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T04:57:30.376Z","timestamp":1785646650376,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"partners-refunds.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Thu, 30 Jul 2026 02:00:03 GMT","end":"Wed, 28 Oct 2026 02:00:03 GMT"},"fingerprint":{"sha1":"3C:98:16:B0:43:87:B5:E4:DE:21:8B:FB:BD:1C:71:0F:A6:D8:5F:F9","sha256":"44:2B:79:D8:A7:C4:56:DE:F6:FE:A4:99:E0:53:58:74:E3:71:F1:81:70:7B:7C:8B:FD:D1:47:EE:D2:15:1E:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: partners-refunds.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nVary: Accept-Encoding\r\nLink: \u003c//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.7.1.0.js\u003e; rel=preload; as=script; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://img1.wsimg.com/gfonts/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2\u003e; rel=preload; as=font; crossorigin,\u003chttps://fonts.googleapis.com\u003e; rel=preconnect; crossorigin,\u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin,\u003chttps://img1.wsimg.com\u003e; rel=preconnect; crossorigin,\u003chttps://isteam.wsimg.com\u003e; rel=preconnect; crossorigin\r\nCache-Control: max-age=30\r\nContent-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com dev-godaddy.com *.dev-godaddy.com test-godaddy.com *.test-godaddy.com\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Type: text/html;charset=utf-8\r\nETag: db5f23ef4729d74e411cae2ce5a4edcf\r\nContent-Encoding: br\r\nContent-Length: 15681\r\nSet-Cookie: dps_site_id=eu-central-1; path=/; secure\r\nServer: DPS/2.0.0-beta+sha-cb8eafb\r\nX-Version: cb8eafb\r\nX-SiteId: eu-central-1\r\nDate: Sun, 02 Aug 2026 04:57:30 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GoDaddy Website Builder:8.0.0000","description":"","website":"https://www.godaddy.com/websites/website-builder","common_platform_enumeration":"","icon":"GoDaddy.svg","categories":["CMS"]}],"data":{"size":90718,"size_decoded":17692,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12254)","md5":"db5f23ef4729d74e411cae2ce5a4edcf","sha1":"3d07946f7c3074449e723760c1ad8428b77a3282","sha256":"fcf05c58c05860b527e408e0fd1611a799bffc7dfc76884d5421e9f8dcb34538","sha512":"b63fc50f7b8e44d4cb33aa7792f809ea7bcf2d5b53ee2a773803fe786da5d1fa091396877109ef55374c2c3bf60a132fdb650852fc39a41524485edd53df4250","ssdeep":"1536:uqGzlAdCUP7X8lCnNHcEfF7vkaQDNjHaWp/WiOKWM70cvspRO:uhp8KjvspRO","tlshash":"5c93f89322051218c2734ce971f67ba0714ba914da52d3749bfc4c389fe69a903b6f7e","first_seen":"2026-08-02T04:58:07.671784Z","last_seen":"2026-08-02T04:58:40.636255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":74,"connect":1,"send":0,"wait":51,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-5804ec33.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.255Z","timestamp":1785646651255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-5804ec33.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 530\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"84d95b7a2c73dbcce629e7a7cc1dd0b8\"\r\nlast-modified: Wed, 31 Jul 2024 15:44:23 GMT\r\nx-amzn-trace-id: Root=1-66aa5bd6-61f572956b6733d13b3ec2f7\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.107\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":896,"size_decoded":1265,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (829)","md5":"84d95b7a2c73dbcce629e7a7cc1dd0b8","sha1":"b597f2e6e17792a9a415d445166cb20a4980a50d","sha256":"baebb194cd33324576498d7f6872896adeedc3705793f647ffdb1937edc53c37","sha512":"497874af3dc1342fb355d7dd218787e69a58b265d8867d4fa21f34da4136ef45a72323c284300c33758f6c20a6cc998f222994b1c7e494846adbb950a6e704e3","ssdeep":"","tlshash":"e61163c832d0f8fa0a92a0d544af6503f12c6e63622c50b8e1d5a4705cfac0bd5faf03","first_seen":"2024-08-08T21:53:45Z","last_seen":"2026-08-12T03:07:35.277569Z","times_seen":30986,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-a2c518b6.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.258Z","timestamp":1785646651258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-a2c518b6.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 6646\r\nx-version: 0.7.3+sha-17cd3dd\r\netag: \"c44ebbb1c5cc623f903b5ec3f9c94e13\"\r\nlast-modified: Thu, 28 Sep 2023 14:18:04 GMT\r\nx-amzn-trace-id: Root=1-65158b1b-321115d34fed03de6eb68136\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.106\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22398,"size_decoded":7382,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22335)","md5":"c44ebbb1c5cc623f903b5ec3f9c94e13","sha1":"c1b02b25117e84cc994936d034a3b02d0e6c28dc","sha256":"2c0b8b1b44960fa5584fb5d8f1bb50e21662ec06a70fca8eedf8299c69f2e2ba","sha512":"8049e19c0a08a1504b539d34bbbeb642b651ce49b3b5ac2c585e6796ca9cce6e6a9593094eeecfc8e00e9d30f19ee27743a33e24d6dbdc840e7cbacdbe057df3","ssdeep":"384:7EuK/6kvTqLDwd24bXXyiAhSs1hiAhAiSeG3dvBRUqSMkc6u:ouJ5MA4DXc1+ipG3TzSMk0","tlshash":"c6a275da7e9062cc5487db9ede2a9944331e30bf757f4650128edb98a50bb84fd4b820","first_seen":"2023-09-30T14:43:03Z","last_seen":"2026-08-12T03:07:35.296149Z","times_seen":30177,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.950Z","timestamp":1785646650950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/sourcesanspro/v23/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 14192\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:46:30 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14192,"size_decoded":14941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14192, version 1.0","md5":"383a6caef45833f18805da08839aee79","sha1":"55466526418e04ae91aafcee59b504ee25bc283b","sha256":"8be2b8802195a0dee4e2737c1335dc7a3cc5e803746cd8615dec095f589a71bd","sha512":"cd15c3a337b5a54050d98903be2255ebc8026d74401ed2cb629c0d351a8a857e5392e38f6e7e12670ffa595d60822e12703b3f012d145cef2c66721e5dbbe49c","ssdeep":"192:m6Sv7kjqPjXxsGiOxIdHA2LiBpZaxU1G7ZBsaJMSNKztPUbC210Ghovc1F6ow:IvSwxsBOnQg3YSG7ZdJBNKzZU2iJLw","tlshash":"2252df6226603123a7bd0c39f2ae634f0c1505fd564c8f2492bae5d49e49cfaf486f87","first_seen":"2025-09-13T01:08:40.741377Z","last_seen":"2026-08-12T03:07:35.289168Z","times_seen":23423,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":7,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f/gpub/f6883bd044cc99dd/script.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.959Z","timestamp":1785646650959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/a7619455-81ad-43e3-b5a5-b0ed1f5f7d2f/gpub/f6883bd044cc99dd/script.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 16698\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"2c7ada840d8d16fac3ffc47d17c42849\"\r\nlast-modified: Thu, 30 Jul 2026 02:01:37 GMT\r\nx-amzn-trace-id: Root=1-6a6ab080-2fd639f3142cb4730937703b\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.109\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":71215,"size_decoded":17435,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56435)","md5":"2c7ada840d8d16fac3ffc47d17c42849","sha1":"0a870e75bbce2ab467b90f55746168d1ee538b5a","sha256":"fe7e5d334dff46e722e7926210bb8fe1afb262105e485ffefba1252a0be681e6","sha512":"7ea02d3ea6ad107600c40a05bab5c4bc7f013a1ad4470c6f8b085256f9765927b164cd4efd11a7412bf9095ae1498663952ce166f5d3bbd8821b14919d03602e","ssdeep":"768:RfLoCGFoLe8vvmmSUd/ibzfssrD+zEP2Ap+xfNmOnnGzU4pxmTXIfRMpAKse:ZuPTsfJSFE4f+pAKb","tlshash":"c863bc6e76e5d025fe8c0f3bd1f59d6a8c8813fb8578483c559bdd812be2af58218d02","first_seen":"2026-08-02T04:58:07.676151Z","last_seen":"2026-08-02T04:58:40.64267Z","times_seen":2,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/gfonts/s/sourcesanspro/v23/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:30.954Z","timestamp":1785646650954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /gfonts/s/sourcesanspro/v23/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://partners-refunds.org/\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 14868\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nlast-modified: Wed, 10 Sep 2025 16:47:45 GMT\r\ncontent-type: font/woff2\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:30 GMT\r\ndate: Sun, 02 Aug 2026 04:57:30 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14868,"size_decoded":15617,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14868, version 1.0","md5":"a870ee3703f35f3b772e1ea3aff0abea","sha1":"2f73bac27e4fca1630d90813a858d7b815faf5c2","sha256":"691491f1fc8badab623e1be56f92cc2d98c462b16617c67e1e288d6b061444bc","sha512":"eb7e106769da2737a2d128f7b5ffeb145c03ecb3e0d120ea8e48f66b54ccc92b3657c9ba44385b355643e344329318c3d4eddde64b060ef580b419ac09d48add","ssdeep":"384:mVyQfY5SLPyg3mKvJU/rtyXWtnpeb0qY9X3cCI1Ll62yQ:2YS7fWKvJ2tyqM0PXINl62yQ","tlshash":"7562e0e9d92843e74d2019387b4b78df360adbed631a4878e995c49b6014af79122c1e","first_seen":"2025-09-11T17:07:37.667838Z","last_seen":"2026-08-12T03:07:35.29369Z","times_seen":72421,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/DynamicFontScaler-d6821741.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.289Z","timestamp":1785646651289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/DynamicFontScaler-d6821741.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 2364\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"45f08442fd20e45e6735bab7efe465fc\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:57 GMT\r\nx-amzn-trace-id: Root=1-6a517c00-724c402244d3d26a04d68f39\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.206\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8607,"size_decoded":3101,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"45f08442fd20e45e6735bab7efe465fc","sha1":"56a887f57437c7c4e0978005a0689262d7f4c497","sha256":"4fa67d74e2b8f77bb9a12a3e4b36eebba14d846c1d96afc353f4fadf6564ab04","sha512":"ee6567cb6aa2a955a36ded0e449bc586e2866b0b7168c91c7ba37a9ec6bab5ac96d0cb2b35ae02f0d86d9c0189981e655b669c71fd01726130094cdacfffd076","ssdeep":"192:gxRnxugm1B3ZOAYpMBSLo9dfcCCcai/SazsXbM5k9o4zk9oTx3EkOcimlQfchA9u:y6gkB3ZOLuBso9dEwUgkK2kK1nugsV+J","tlshash":"3f0255053ef20036a297504edb1fa1457119948720abfe50beddc2686fd4a7e25f2fac","first_seen":"2026-07-12T06:26:59.023542Z","last_seen":"2026-08-12T03:07:35.28622Z","times_seen":497,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/dynamicFontScaler-31729aff.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.305Z","timestamp":1785646651305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/dynamicFontScaler-31729aff.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 661\r\nx-version: 0.7.3+sha-e9e9cfd\r\netag: \"be37c211f8e8ec7fdb49e338c53f820a\"\r\nlast-modified: Fri, 10 Jul 2026 23:10:50 GMT\r\nx-amzn-trace-id: Root=1-6a517bf9-7f2b3ccf4a448cce402d5bf4\r\nx-forwarded-port: 443\r\nx-forwarded-for: 160.153.192.229\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1465,"size_decoded":1397,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"be37c211f8e8ec7fdb49e338c53f820a","sha1":"aee0f639d548fa67833fd7bc8da46484e96b8cba","sha256":"37086fe8f96d3032acef19028e744aec530742f7cf0441370a454b206822c907","sha512":"e011d616eb360639b953b13d86c97075fb2d066236f846c36cd0210135a419352624069ab771087a5ce00953eb582d938d3f7c9bff116c356a96dfa1cc01b424","ssdeep":"","tlshash":"9e31cb6a592140156403500da71f3615362840874d9abc507acd67a8fffcbbf74f2bbc","first_seen":"2026-07-12T06:26:59.050899Z","last_seen":"2026-08-12T03:07:35.268337Z","times_seen":497,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/blobby/go/static/radpack/@widget/CONTACT/bs-contact3-contact-form-48030a46.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://partners-refunds.org/","date":"2026-08-02T04:57:31.342Z","timestamp":1785646651342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /blobby/go/static/radpack/@widget/CONTACT/bs-contact3-contact-form-48030a46.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://partners-refunds.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://partners-refunds.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 643\r\nx-version: 0.7.3+sha-4aa1798\r\netag: \"fcf051342d17dec824a8d93362a1812d\"\r\nlast-modified: Tue, 15 Nov 2022 20:54:18 GMT\r\nx-amzn-trace-id: Root=1-6373fc79-137226f7533742ed7fe8c304\r\nx-forwarded-port: 443\r\nx-forwarded-for: 64.202.160.104\r\nx-forwarded-proto: https\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 02 Aug 2027 04:57:31 GMT\r\ndate: Sun, 02 Aug 2026 04:57:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1425,"size_decoded":1378,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1362)","md5":"fcf051342d17dec824a8d93362a1812d","sha1":"07e4f834c7c2a73c20be68c5c707f50ebf72701d","sha256":"8ef9d11c22b4daf7f94bbee7eafe8d4a597e1a99562bf81143f8efa4ee7d079f","sha512":"ff744648af93c313d77ca0869223173711942e7d6a55d796f182adda027965febaadac8ebbbf22d2e38bfdf851b7cbbeab239bc4f99bc3cbd32710f6453b3fe6","ssdeep":"","tlshash":"fe21ed64786440944cff848fc95a040233c495afc0bf05e0b6dab4e9f6d97ac3ca6bb1","first_seen":"2023-03-08T14:28:04Z","last_seen":"2026-08-12T03:07:35.298471Z","times_seen":16156,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}