{"report_id":"790418b1-6115-4ec6-b057-ae440044e560","version":0,"status":"done","tags":[],"date":"2026-09-02T02:00:43Z","url":{"schema":"http","addr":"hovarstour.com/","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"hovarstour.com/","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"title":"HOVARS TOUR – индивидуальные туры по Армении","dom":{"size":66551,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (367)","md5":"50751da9aa3693423e74a98e859fff6f","sha1":"b779810d4e9e5dcebefbe48e03bba74718c597d7","sha256":"6ccc8c2ee103a7c4ec817a263998aa447f992566e76501604b19bfc166e8c0e9","sha512":"7cf976a08bb2d8ac0817c27039f5efac3d6c9a99ae57d9c3d49bf8ddc3035058d4898a3ef0515c21ae6d44b64efc35dbf85c0fffaf0268986c630c319e824ce9","ssdeep":"1536:Xv44vlF6I3zCnnRaH6QMWnlOqXLWH/V4lf:XhF6I3zCnnRaH6QMWnlDXL8/Vg","tlshash":"135321b1a4f104b70216d6c3ee28af0abec2c25bcb57955171fc1a99afd6d53ca2305c","dom_hash":"domhashc445c6df1998b7e024f5f69263b0cda2","first_seen":"2026-09-02T02:00:58.302196Z","last_seen":"2026-09-02T02:00:58.302196Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hovarstour.com/","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T02:00:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hovarstour.com","ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T02:00:47.641638Z","last_seen":"2026-09-02T02:00:47.641638Z","alert_count":0,"request_count":34,"received_data":18352560,"sent_data":41720,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]},{"fqdn":"app.allwidgets.ru","ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2019-07-16","domain_rank":0,"first_seen":"2023-08-17T08:43:49Z","last_seen":"2026-08-20T09:21:11.166241Z","alert_count":0,"request_count":6,"received_data":492884,"sent_data":3137,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":5,"received_data":139501,"sent_data":2857,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hovarstour.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T02:00:47.638568Z","last_seen":"2026-09-02T02:00:47.638569Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-08-27T02:40:31.425186Z","alert_count":0,"request_count":1,"received_data":2534,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-08-31T08:43:22.767816Z","alert_count":0,"request_count":1,"received_data":87910,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cp.callback-free.com","ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2020-04-08","domain_rank":0,"first_seen":"2020-07-16T11:39:08Z","last_seen":"2026-07-17T03:08:58.504079Z","alert_count":0,"request_count":1,"received_data":16182,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":3,"received_data":56343,"sent_data":1675,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hovarstour.com/js/script.js","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f81b29be6769218c79d553c27febf55","sha1":"b56236a929a105e733dfebd231d54e6b6dd66dde","sha256":"fb40efd79afd3c0dfe39a0c71748a39851aff187ed63e4be50e01bbe4f132e8e","sha512":"1b300ab3db72751a085bb1171cfa19966bdcceb725d31fc353598f73762abd582c0c63ad75de36369917b91bc77915d51b66756b116c187a25da169070ef4375","ssdeep":"12288:3SFemHFgymkplyHCcmM0/W/EEwKvQRgPrVhDdRlb:0lyHCcmM0/W/EEwKbhhDdRlb","tlshash":"0bc4a6c9f39c266a867b32595c2e02cd723d8075d600587ebc5d59dc2aa883c43bbf79","size":566384,"data":"","first_seen":"2026-09-02T02:00:58.347081Z","last_seen":"2026-09-02T02:01:06.308386Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/js/custom.js","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d023a315b6a372866bfb0129eb3a891","sha1":"33997aee1355d854ec37a8ea2110e3e376fe7ea8","sha256":"704b2989fa5fb52ad03687ab8012974ba66c02a9b051382ac44934aa3ec13e4e","sha512":"c1e1feea59598b7084839836650f3b5e316d1297978878fdf9ee846989ef458aefa204cafa65cc9c17e48bc5d3b5d6baa5f2416662eede16c3acc840823bc6e8","ssdeep":"48:NcHI78es88d1jPEWWEWjrJO8HeCRm5zS73zUsSzAo2yejPSsszqr2ogejPBssEW:iLQHyS7W2y8qsg80W","tlshash":"fc91781cbcf241a3863baa6a4bbfb2441b74621bc70cca0174ded7c45f0094cb162da7","size":4608,"data":"","first_seen":"2026-09-02T02:00:58.308526Z","last_seen":"2026-09-02T02:01:06.321665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e821b2fb0b3b6d5d078858765b0d29e","sha1":"2181f8278eb90c6424fa6b7b999649179b028e04","sha256":"449787e8d401ddf105d4482af025a506a24a82461a64149cb907200b740fa3f5","sha512":"d26bcb686a4da2740feaeffbb6558309f4d2713c7799e24855b2041ec996e5524f88c65cef6aa5f3afb159d1eaf277e932c1a847b1447c44b26f3d596cf91a1f","ssdeep":"","tlshash":"bbe0f1a538dc1421c377216567eb600d7416643f0c0ebd25f50dc4422f7ddbe086b94c","size":434,"data":"","first_seen":"2026-09-02T02:00:58.398861Z","last_seen":"2026-09-02T02:01:06.353495Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.callback-free.com/api/js/form-builder.js","fqdn":"cp.callback-free.com","domain":"callback-free.com","tld":"com"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e475c827304e65cc5af78511efc0298f","sha1":"e37338e8a2c6d34d2ea4a2c1a11d7ac8d6aded06","sha256":"eabf89162514d9e5ec81962647dc58e0ed08da4192421212a88a817c9f009f40","sha512":"0516d1bb937b8968aa36ff10511d72e6a3f12b53ecd93c32eb09dbc22e44193348ec5b84f15173b1bdc691a7bdb6fea06237bfc10159f07b8e21678fc4b5fef8","ssdeep":"192:wZkHE56jJssTAhi2CYEiyTUcOhGbuXg4GLxB6FZbQAQ1QKOzQgQFQas:wZzsTAh/MjTUcOYbuw4oB6FJIg+s","tlshash":"ba6221247b0ec5224ef6f32f4275438af5ad91a79c8e80537d2e96583ff048a43a1dd2","size":15649,"data":"","first_seen":"2026-09-02T02:00:58.375782Z","last_seen":"2026-09-02T02:01:06.315715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.allwidgets.ru/s/callback/vendor/intl-tel-input/js/intlTelInput.js","fqdn":"app.allwidgets.ru","domain":"allwidgets.ru","tld":"ru"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"82fcb5287da84c1f4382a4326e3213ec","sha1":"74a45be71424ac250f408e6713e8e40e5719bbc5","sha256":"5ed999cb99411ce32a1646ec092627e7d472ad4fac67ac3d29c7b773d2706629","sha512":"9826963b147a27271091c1bc84c53d0b2a9e400763ec022d5c2f094c1f11b47b38e769f43036c670b7d2f1c6c540d266ca4e5a7a1ca0197972df5c91331f0449","ssdeep":"1536:ghnxcDdGYJtvCfVHlYCRtWPRdg8sdS6opFM:6eVCfVHlYCRaREdS6MM","tlshash":"4e93b41ea7e703279cb3e17a6faf504e62648517460acc143c9c97c81f8d87586f6be8","size":96132,"data":"","first_seen":"2025-09-23T11:21:06.137102Z","last_seen":"2026-09-02T02:01:06.304924Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.allwidgets.ru/s/callback/vendor/intl-tel-input/js/utils.js","fqdn":"app.allwidgets.ru","domain":"allwidgets.ru","tld":"ru"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fbb046b45bbc536d74e84e66a34eb3a","sha1":"8c002c7368b6c005d0d8d125f8edd972f2f004b9","sha256":"0dddf1bd2295251d2236219c29d7354bfaa734ec082e980fe586bfc498a5b84e","sha512":"4358edefde20487510b070679fe73281b5abea480aa358108d522c8e2abbe4ea3297806a89ba95c35c7e41b40575b19f502f690b011556cae665f18c033decce","ssdeep":"3072:3I/M0k8BAJjFs3OwPss3MwP2m9OOVS2x0T3TdxQgnGHIpUsW5jkmLNjoopuDs/vs:3I/MIyBu5x0T3TdxsnoZ","tlshash":"7244dfebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":253990,"data":"","first_seen":"2023-11-01T13:43:25Z","last_seen":"2026-09-02T02:01:06.346193Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-02T15:51:19.49174Z","times_seen":144288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/September2022/QYGiNQKiwY8rqeo0HrxQ.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.905Z","timestamp":1788314409905,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/September2022/QYGiNQKiwY8rqeo0HrxQ.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 80902\r\nLast-Modified: Tue, 06 Sep 2022 20:11:44 GMT\r\nConnection: keep-alive\r\nETag: \"6317a980-13c06\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80902,"size_decoded":81145,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 1080x719, components 3","md5":"785cda2f5a825fd0e263c4a53cfe4236","sha1":"4c15239330745a217209db3bf3c65bda760dc510","sha256":"6cdfa1897d4bd352fb98c354a6a9ebf848433b7eee4ef22c63aa56a556cc5f55","sha512":"7879c52decaf333e3b19f8b04ee371a42ea279139251a90346a2d7b8118faf4c8d9b1f9d33cba1d47fb74637dc164e33046d16db2a076f0e8692003b2b2c0b5f","ssdeep":"1536:mROzaWH+Ia0EaZWiMPWRbpq3nSQnogW7sWsJwTATc:BaKZBRNqnuBsJwTR","tlshash":"3183f1079904ce45a829d3d8fc0b5cae6ba97b08ed1d727905a2cf2f3e00576681e279","first_seen":"2026-09-02T02:00:58.303785Z","last_seen":"2026-09-02T02:01:06.30244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":286,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.allwidgets.ru/s/callback/legacy.php?key=Abg8X3oi","fqdn":"app.allwidgets.ru","domain":"allwidgets.ru","tld":"ru"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.348Z","timestamp":1788314410348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"app.allwidgets.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 16:30:15 GMT","end":"Thu, 22 Oct 2026 16:30:14 GMT"},"fingerprint":{"sha1":"D6:B4:46:03:47:0D:2E:B6:C8:1C:9F:D9:DA:9F:98:2E:FC:B3:DB:52","sha256":"A2:73:1A:27:9C:DB:5A:D2:EF:2F:01:D4:95:24:1C:C0:E6:F9:C0:EF:E5:3E:A8:3F:15:A5:E7:87:AA:09:74:F9"}}},"request":{"raw":"GET /s/callback/legacy.php?key=Abg8X3oi HTTP/1.1\r\nHost: app.allwidgets.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hovarstour.com/\r\nOrigin: https://hovarstour.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:00:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: no-store, private\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nx-request-id: 9561eaf3a125d29e47c0ed2292759364\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9680,"size_decoded":3116,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b436749e5acf5008b22c4ce80f65d710","sha1":"c0e71597de1b0cacde1e14bc1239aed7e05d3eba","sha256":"aa47da45fd59e093ecfcf5728ccf802bd38b4eb2a3e260c694fb592e929e963d","sha512":"663eb551404a278cffda92b2a168725307c84e31ecd34ff9eb6b59a26ebd4b6872c1d5cfa2a0ef674d50fbbcf534059dd0c62d4314045b624fd2fc17a2c8dd48","ssdeep":"192:0djJ3jJHbjNLbjNq44iIvzKhDd3gjI3sdQ:AjJ3jJHbjNLbjNyiMzCDRGQ","tlshash":"431278f5a06d030c2d5775dafe715a2e3b4ea414f816d3e64cae3273c389ad49997202","first_seen":"2026-09-02T02:00:58.305231Z","last_seen":"2026-09-02T02:00:58.305231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":80,"connect":30,"send":0,"wait":33,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.allwidgets.ru/s/callback/vendor/intl-tel-input/js/utils.js","fqdn":"app.allwidgets.ru","domain":"allwidgets.ru","tld":"ru"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.747Z","timestamp":1788314410747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"app.allwidgets.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 16:30:15 GMT","end":"Thu, 22 Oct 2026 16:30:14 GMT"},"fingerprint":{"sha1":"D6:B4:46:03:47:0D:2E:B6:C8:1C:9F:D9:DA:9F:98:2E:FC:B3:DB:52","sha256":"A2:73:1A:27:9C:DB:5A:D2:EF:2F:01:D4:95:24:1C:C0:E6:F9:C0:EF:E5:3E:A8:3F:15:A5:E7:87:AA:09:74:F9"}}},"request":{"raw":"GET /s/callback/vendor/intl-tel-input/js/utils.js HTTP/1.1\r\nHost: app.allwidgets.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:00:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 19:20:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a972587-3e026\"\r\nexpires: Wed, 09 Sep 2026 02:00:10 GMT\r\ncache-control: max-age=604800\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nx-request-id: 59b3c98f7c9eaf55461e7562ec5e9c3d\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253990,"size_decoded":58810,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"6fbb046b45bbc536d74e84e66a34eb3a","sha1":"8c002c7368b6c005d0d8d125f8edd972f2f004b9","sha256":"0dddf1bd2295251d2236219c29d7354bfaa734ec082e980fe586bfc498a5b84e","sha512":"4358edefde20487510b070679fe73281b5abea480aa358108d522c8e2abbe4ea3297806a89ba95c35c7e41b40575b19f502f690b011556cae665f18c033decce","ssdeep":"3072:3I/M0k8BAJjFs3OwPss3MwP2m9OOVS2x0T3TdxQgnGHIpUsW5jkmLNjoopuDs/vs:3I/MIyBu5x0T3TdxsnoZ","tlshash":"7244dfebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2023-11-01T13:43:25Z","last_seen":"2026-09-02T02:01:06.346193Z","times_seen":92,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/js/custom.js","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.789Z","timestamp":1788314409789,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4608\r\nLast-Modified: Mon, 17 Jul 2023 14:09:01 GMT\r\nConnection: keep-alive\r\nETag: \"64b54b7d-1200\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4608,"size_decoded":4861,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1d023a315b6a372866bfb0129eb3a891","sha1":"33997aee1355d854ec37a8ea2110e3e376fe7ea8","sha256":"704b2989fa5fb52ad03687ab8012974ba66c02a9b051382ac44934aa3ec13e4e","sha512":"c1e1feea59598b7084839836650f3b5e316d1297978878fdf9ee846989ef458aefa204cafa65cc9c17e48bc5d3b5d6baa5f2416662eede16c3acc840823bc6e8","ssdeep":"48:NcHI78es88d1jPEWWEWjrJO8HeCRm5zS73zUsSzAo2yejPSsszqr2ogejPBssEW:iLQHyS7W2y8qsg80W","tlshash":"fc91781cbcf241a3863baa6a4bbfb2441b74621bc70cca0174ded7c45f0094cb162da7","first_seen":"2026-09-02T02:00:58.308526Z","last_seen":"2026-09-02T02:01:06.321665Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":1,"connect":34,"send":0,"wait":33,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/September2022/BHfh3yP2UV4dt88J6Cqg.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.855Z","timestamp":1788314409855,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/September2022/BHfh3yP2UV4dt88J6Cqg.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:09 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4144511\r\nLast-Modified: Sun, 18 Sep 2022 18:16:16 GMT\r\nConnection: keep-alive\r\nETag: \"63276070-3f3d7f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4144511,"size_decoded":4144757,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 8000x6000, components 3","md5":"bdb21b12783327d1eda58f2f757b9882","sha1":"2b7382407890decaa8f793091126c855f1a8ed0a","sha256":"18e7fa1ec180ae6590ff75b0d96d7009bd3f840e28600c73545ff12f11b62083","sha512":"318dfebcfb54b152b0acb36b8e7b205609d25f25d4c2951d4794206a66e95c44af3a7f341f2aaeba750ec33419b6fcaac4e1ee77749c462dacaaf2e76520dd3e","ssdeep":"24576:ca9EX9pNi9JaelGHv219d37QyXez6UqEhsM5G0Y2mh8:caSYJFGIdr0XhsMXF","tlshash":"86252323dd009f81ae16e7f0fb07469d5d91322af2623895aa37f68739b9750384c736","first_seen":"2026-09-02T02:00:58.310018Z","last_seen":"2026-09-02T02:01:06.350286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/jsKODnglzScAiASkpFml.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.869Z","timestamp":1788314409869,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/jsKODnglzScAiASkpFml.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4499535\r\nLast-Modified: Fri, 19 Aug 2022 15:26:59 GMT\r\nConnection: keep-alive\r\nETag: \"62ffabc3-44a84f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4499535,"size_decoded":4499781,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 6000x8000, components 3","md5":"2fb06b251d27bd58bf3c974d33993359","sha1":"15de54f7ae1116bd50666aa9c53203ebcbb5fb47","sha256":"f9059b0920688e77608761ccecb02bbc42e76cb7de76140d2d82c0806ab126f7","sha512":"2d33dd01ba0f8bba1b3fe934636cdefffdf5c31c0f7dd616eee239f7794c06a8859588b8eeba75e12c64e1e8674fa5bfb1a796022626dbf570330afe0aa531ed","ssdeep":"24576:3tGf98nY56T+G4LV//eh+jwrkN657z1iq+M9lJCBM:dU8nhG4ykkNgiq7PyM","tlshash":"32251213ad4a98432822c7e5fb5cdbcf6971322f776139c97993db732a2c6005a152f2","first_seen":"2026-09-02T02:00:58.311672Z","last_seen":"2026-09-02T02:01:06.32372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":36,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2023/GjIe3eAJJTPLbRzGGgFZ.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.937Z","timestamp":1788314409937,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2023/GjIe3eAJJTPLbRzGGgFZ.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 114223\r\nLast-Modified: Thu, 24 Aug 2023 07:48:08 GMT\r\nConnection: keep-alive\r\nETag: \"64e70b38-1be2f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114223,"size_decoded":114467,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 558x1280, components 3","md5":"daa4dc25e89c9e3885d5e8f00c57c8b2","sha1":"f44f6c9bdc32e90e8384e80a131de358325f964f","sha256":"29c0fe8c0d82e4862b5f02295c44f95ae931974b5974e941e7c31b1dec7cd34d","sha512":"c5dbf75feea927eb39ef5869b7dab447daa1b792ef2232944cf2d73968cf8504e58106135b180103b132eb771fca156190ca2e899141fbde4383ebc8db6400e0","ssdeep":"1536:0gXUGS5dKwtdu9xzcfLUKK7aoVaOJFhWGyvNi49OFkt+f3IU+CO51/Xb+Ip59:TvSdXfLdK7a4F3h3bSMktKYUM51TLp59","tlshash":"73b3125ff2f62e0b22dde3de5e2c96f21387288529f1ca5189ee5a5303f11419a035b8","first_seen":"2026-09-02T02:00:58.313494Z","last_seen":"2026-09-02T02:01:06.335901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.722Z","timestamp":1788314409722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;600;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 02 Sep 2026 02:00:09 GMT\r\ndate: Wed, 02 Sep 2026 02:00:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9635,"size_decoded":1369,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"555eff703e1bc76c5f0d92f5207b8011","sha1":"f8c22c15e6a6796f4baf9d7e6f6f32e5c56ece4d","sha256":"e412701847ab46c1cf804a17c21cbbb94aaada241c23b49e71569fc11e4ce1ec","sha512":"e96c0dd99307b82be16cf950067b70ad2f2c3c6ecb72e808f64815fe43308fc3f36edaa1365605f0d0351ae6eb48192c6c0744b76a8cad16a21fb86461c316ff","ssdeep":"192:YRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+OjuMR77wIO5u8:4QPTzajdmPE","tlshash":"2f12ad91105be500e6472cc923cf7e26dd4e21627494c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-05T11:02:25.63604Z","last_seen":"2026-09-02T02:01:06.330161Z","times_seen":262,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":106,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/October2022/Fi3tS8a4DPbhfRat7009.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.880Z","timestamp":1788314409880,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/October2022/Fi3tS8a4DPbhfRat7009.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 149024\r\nLast-Modified: Sun, 09 Oct 2022 20:13:05 GMT\r\nConnection: keep-alive\r\nETag: \"63432b51-24620\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149024,"size_decoded":149268,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 698x1600, components 3","md5":"21f2dcee4c68a85681a427582345b4f3","sha1":"f99d2fdea8de8acfccd285caf4bcba8459b75a85","sha256":"2263d3894e28b6896991939598ae91e08da867d83b84a3ede664c8deb44b4721","sha512":"5bbfc4560223096ce1d7c9a5243fca68224679f3eeeb90e725489081ea178248dc373cfc4570d22ed5eff97ed33da41e081706c9f4098c240e1e60697180e9d4","ssdeep":"3072:YptEUyoREuda9Tyhqe5zFGKToDNHU6OeUGwRsUTjh/g2vr5:YpmUiAacvFGCoDN0feUnRsmjT5","tlshash":"40e312e82d4706c649d0525e8f5774c8b7a049f97c73eccb9425ebfd0bb6daae244280","first_seen":"2026-09-02T02:00:58.316571Z","last_seen":"2026-09-02T02:01:06.332309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":318,"dns":0,"connect":0,"send":0,"wait":33,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/social/email.png","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.954Z","timestamp":1788314409954,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/social/email.png HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 25193\r\nLast-Modified: Mon, 08 Aug 2022 11:16:37 GMT\r\nConnection: keep-alive\r\nETag: \"62f0f095-6269\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25193,"size_decoded":25434,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"775dfe7f630b37076c29d0e16e21ffcf","sha1":"f5b77a67dad620340392059cf882b91b517bc41e","sha256":"1ffd3a0617550b6e5167b2fcabb7bf7f4603ad0a22829ad3983e2e3cb775ee1b","sha512":"7b5b443bc454c109344d8d2731b3a6350c48529f40fa5eae81ffd6a22c7dc74705204bcccead9ba086c5d195479c629d0bcf8cd4b275d652667155c97fee36c5","ssdeep":"768:lbTIVXT2xmxjKB/JJnFOuVqcWkjzJrQIr:lHAimxUJFOaJYIr","tlshash":"7fb2d02767cddc904accd23bc3485e4395ef29c9571a31f4106b55637f72a850aa367c","first_seen":"2023-08-28T19:46:07Z","last_seen":"2026-09-02T02:01:06.317611Z","times_seen":30,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/social/facebook.png","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.957Z","timestamp":1788314409957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/social/facebook.png HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 4865\r\nLast-Modified: Wed, 21 Sep 2022 14:35:55 GMT\r\nConnection: keep-alive\r\nETag: \"632b214b-1301\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4865,"size_decoded":5105,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"61a96c78b48018b48fbb6254a93b93f8","sha1":"ef9b88a726de6c2beb2b71ee5b8d660200359259","sha256":"bead612569ccff4bf9c533a8297ad940b8f871b8bc7057593d2ec6f7d9c9066b","sha512":"fc0319003ae2652983da32a6d2016b6ca927af8a404dfed214d43816030badde4a59317c9bace22f4df0824624f299ed30bb6a6c2322d0b35ec82c1c7155537a","ssdeep":"96:KK5Wxff33Pf3CTSf5fjvEuYX8PgBR2punI7QF2jv7fqgxDuYL:Keqntf5fvDLUI7NvC1YL","tlshash":"00a11997f64a4df614ae03a271930b5c6a975ca141e389ca2befa4dc2c88ec4606f1d1","first_seen":"2023-05-29T03:25:31Z","last_seen":"2026-09-02T02:01:06.311663Z","times_seen":70,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.165Z","timestamp":1788314410165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hovarstour.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 373923\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-02T16:16:04.938854Z","times_seen":555560,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":47,"send":0,"wait":22,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.allwidgets.ru/s/callback/vendor/intl-tel-input/css/intlTelInput.css","fqdn":"app.allwidgets.ru","domain":"allwidgets.ru","tld":"ru"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.743Z","timestamp":1788314410743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"app.allwidgets.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 16:30:15 GMT","end":"Thu, 22 Oct 2026 16:30:14 GMT"},"fingerprint":{"sha1":"D6:B4:46:03:47:0D:2E:B6:C8:1C:9F:D9:DA:9F:98:2E:FC:B3:DB:52","sha256":"A2:73:1A:27:9C:DB:5A:D2:EF:2F:01:D4:95:24:1C:C0:E6:F9:C0:EF:E5:3E:A8:3F:15:A5:E7:87:AA:09:74:F9"}}},"request":{"raw":"GET /s/callback/vendor/intl-tel-input/css/intlTelInput.css HTTP/1.1\r\nHost: app.allwidgets.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:00:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 19:20:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a972587-5dc6\"\r\nexpires: Wed, 09 Sep 2026 02:00:10 GMT\r\ncache-control: max-age=604800\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nx-request-id: 01d825a841f692435698a50ed7e2e2e7\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24006,"size_decoded":3666,"mime_type":"text/css","magic":"ASCII text","md5":"2f85b79971a4b7aef507d3e1ee62c8d1","sha1":"86e3dc0ae4eb1f19b3f471de93f940609495de0a","sha256":"0459764f049b18a1320917d2d498b9ad23294112183f4487383fbfcf5f5feb74","sha512":"2b2f521609186080167c56eccfe4efaecfa4a56ee683242efa0954127555eb4fa7c433deeb8c340ab61148c2ac993c09b4dda35cd994e52060732cca3b0b27df","ssdeep":"384:15oFjFgXk2limOg1ElcGewQEYEDUZ7uMMWdmttZrbr:1KFjFgXk25PET","tlshash":"a5b251674bb27914f92be1e13c6006a2373f5c03b81e5b3d66e63dbd66850e0a4f3691","first_seen":"2023-05-26T08:31:11Z","last_seen":"2026-09-02T02:01:06.320295Z","times_seen":140,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/wasGn4JxfZjT54ifvqcR.jpeg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.846Z","timestamp":1788314409846,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/wasGn4JxfZjT54ifvqcR.jpeg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:09 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 123259\r\nLast-Modified: Wed, 03 Aug 2022 15:25:53 GMT\r\nConnection: keep-alive\r\nETag: \"62ea9381-1e17b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123259,"size_decoded":123503,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 900x600, components 3","md5":"30547814fb951da0ade5fe2d8b5a3dbc","sha1":"c634c2ae4c9ea76d51a3dc1cc2a419bba4d6eea0","sha256":"10731ccf5a9f15d3a9af76ef8bb8f7e6ac543043e50505fbaf3fdd823087a564","sha512":"0850e3bb8f0ea84c651f0a1311f71a7144a2b80c4e8adc40f78eaf0e45f6c49c3af487a6106ae75e61652ef87a83d35cb3d6a1fd3f87439fe76cc5768ca95c22","ssdeep":"1536:oAaYQ954unEJGdtf+xhLtvCrH+CXgdpQt3tByKoOIXz43c0C8XybHD+oOFeJXMX:QYydA5xJArHJnHoOIXYU8k3X+","tlshash":"5ec3021b32568384632ed1a5182fbedcaf56ff14e3857c9b24068d8b79b4bb3518d48c","first_seen":"2026-09-02T02:00:58.326885Z","last_seen":"2026-09-02T02:01:06.301179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/7WlmvzYCoEf3NziWr9zF.jpeg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.900Z","timestamp":1788314409900,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/7WlmvzYCoEf3NziWr9zF.jpeg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:09 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 517258\r\nLast-Modified: Fri, 05 Aug 2022 22:56:36 GMT\r\nConnection: keep-alive\r\nETag: \"62eda024-7e48a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":517258,"size_decoded":517502,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 2200x1650, components 3","md5":"a2ec3b462dcf6faf582ec3f88f4de7f6","sha1":"11a70359263ba5433e93cf5f964bd94adc80b0e7","sha256":"c7d8e2f8259202a932be340d028a622b99a27fe3f87ec8ebe70a9a864a634b4c","sha512":"1f31b7c2c5a7b5b92c88ee8cd652aee83f5d7bf4d2a61d12407d505e1b485dfa991007a5282b3f0ed1c0512f8920e2dae3af3b64e60634e3372faca9955cef8b","ssdeep":"12288:x1j1SrDTXQn6YOWC+y5+ZeIBUb2OEbwsQ8Yy5tbxpP:x1j1SXTq13UIuyUsrpbxZ","tlshash":"aab4231fcf8f5c97dea8ba1212b504ad994dd82a7380947ec24922f85cbc7d1e1df492","first_seen":"2026-09-02T02:00:58.329288Z","last_seen":"2026-09-02T02:01:06.341238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.169Z","timestamp":1788314410169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hovarstour.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 373923\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-02T16:16:04.938854Z","times_seen":555560,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":25,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/17.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.173Z","timestamp":1788314410173,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/17.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/css/style.css?1788314409\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2936060\r\nLast-Modified: Tue, 13 Dec 2022 10:43:35 GMT\r\nConnection: keep-alive\r\nETag: \"63985757-2cccfc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2936060,"size_decoded":2936306,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, PhotometricInterpretation=(unknown=0x8023), description=Processed with VSCO with j5 preset, manufacturer=NIKON CORPORATION, model=NIKON D3100, orientation=upper-left, xresolution=236, yresolution=244, resolutionunit=2, software=VSCO, datetime=2022:11:08 12:22:43, hostcomputer=iPhone, copyright=Copyright 2022. All rights reserved.], baseline, precision 8, 4608x3072, components 3","md5":"06886f170d4f1e749511d784429d24fb","sha1":"3a13ef3eecafb012fc4755223468441f6c65c820","sha256":"ff13b0eb60ac44583aa3072936287c5fad81e0753fc1033dfb51b7160d01313b","sha512":"1f2a179bc801c85463719c35ff326ea52bad501b7836d6c7f8db96ee69c3cb0a59d89b9518c065b236f6aeff5f9f721e586d3b33490a9c3b4c6088a4591a4e58","ssdeep":"24576:JQ+ccqOpSM/17V6MGFPAZlRcl5doSqBFqhJgLo:JQ+cOpSM/14WlRc2f6H","tlshash":"7e25334bce070e0adf0a7b12b09e4ca2f96010792ddab0ac351d967d2f76774deca115","first_seen":"2026-09-02T02:00:58.331659Z","last_seen":"2026-09-02T02:01:06.318383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/November2022/ezhwX6VS4jzYlliQ1Orh.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.890Z","timestamp":1788314409890,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/November2022/ezhwX6VS4jzYlliQ1Orh.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 94427\r\nLast-Modified: Thu, 17 Nov 2022 08:56:54 GMT\r\nConnection: keep-alive\r\nETag: \"6375f756-170db\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94427,"size_decoded":94670,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 960x702, components 3","md5":"e2ce627906d6aec2e01ee1c3ea9d442a","sha1":"ba0f686ff206ac9101d42878e6d92874d916a04f","sha256":"d4eb515df33ba000e4867f3e88ff9808bad19cc0146d6d8dfefc3cfb96e2cbf6","sha512":"b766e520964f94e1b46fc2b3a26b9c468a3cb501e5beac35769fe7a9edeb4255b06adf2a3962a14df55abb459a93b2bae3df59c0446476b48c33922b39a25ef4","ssdeep":"1536:maHizme0qwnFxI8KWeLU+zzTtYinOSV5WpW3M88XkZSIePULaHTiS3dDhs3E:CzmeSKtw+zP+iD5WpaM8vSIUULaHTiSR","tlshash":"a69312679a795203b70fea682b898d1859040fb3d5429e86c36734acd770ffb690d1bc","first_seen":"2026-09-02T02:00:58.33353Z","last_seen":"2026-09-02T02:01:06.3336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":1,"connect":37,"send":0,"wait":68,"receive":54,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/January2023/CpxH3TojLodTUcYgnnwF.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.927Z","timestamp":1788314409927,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/January2023/CpxH3TojLodTUcYgnnwF.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1687240\r\nLast-Modified: Tue, 17 Jan 2023 08:22:43 GMT\r\nConnection: keep-alive\r\nETag: \"63c65ad3-19bec8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1687240,"size_decoded":1687486,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 4000x2250, components 3","md5":"f5e30bd320bb33827428701e784bea10","sha1":"b1aee51c8e9e9d1adf4963fd3736488ea9a2f61d","sha256":"8db2de248a15193d2f47db4a2962dde114fe92ee221143c1ccb71b96d077699c","sha512":"df94c2a0f7bdffc167f8b7a5ae061df54692a8671f0f47fa6ce8207c4c75032c4399a06129dd237dc2b85bc488e2d15cb66314ec1f2603d253dfa386b95f8e48","ssdeep":"24576:8GZaSvwi1YlstfY/tWPo/op5QmeNHxVA4uw0yWI5T4hcJ24lhfQa:D3wVZuJp+JRS4uw0yWI58ecXa","tlshash":"872533b262844e8e86fd5342153a6107f3f750b4c73607c1f693b1b7a11a6aaccd97e2","first_seen":"2026-09-02T02:00:58.335676Z","last_seen":"2026-09-02T02:01:06.334758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":32,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/social/telegram.svg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.940Z","timestamp":1788314409940,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/social/telegram.svg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1103\r\nLast-Modified: Wed, 03 Aug 2022 17:23:27 GMT\r\nConnection: keep-alive\r\nETag: \"62eaaf0f-44f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1103,"size_decoded":1346,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a406484a813da8f2aea0097612b37eee","sha1":"4f0ba5873ba717baa9ca59bd86b44f6a743bcd42","sha256":"ed1cef4187df58ed6240fe0893555178f8827edd30827dad3bf32abcce6b15f6","sha512":"0c373c142b27ebab06ef00712dbe0c108641ed4f375b3ee72e5a2d1d37f830a494d8c76bd6e7e5e7f13005c06f8a4b0c4e371b5363bf6bcbb39cd2d7dfb059da","ssdeep":"","tlshash":"371123d2b7b6154cad4a53e31b4ad0d8359e60fd73d18e4ae108450c71857afd628858","first_seen":"2026-09-02T02:00:58.337613Z","last_seen":"2026-09-02T02:01:06.327586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/social/vk.png","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.959Z","timestamp":1788314409959,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/social/vk.png HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 17391\r\nLast-Modified: Wed, 21 Sep 2022 14:38:04 GMT\r\nConnection: keep-alive\r\nETag: \"632b21cc-43ef\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17391,"size_decoded":17632,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"fa446b794b976b4fd8a2fccdb347354d","sha1":"096485f5808e88857e46c9dfa9e569438fa1eb2d","sha256":"8cb56771f9cf3f3ad1460e1f7059691ed5f5c66e453bac0f50a870ddeec02935","sha512":"3a9faa33d7b68946872ac946c83f30173e9105626cfa4a073e109ac4d6dc7ff42565021d8c9f719ce7ef21899bc6696257df57bdff1762ae74367de3d3445930","ssdeep":"384:hCZ85WTptnUXGiCwTIGccAhGMCAU23473Pa4VtzM5Srn77gjQI4TObZ/ga:hLItUX6wTIaUGNsQVi0rn77fIxoa","tlshash":"4172d0d0dcb865f19ce40a21e57b00976e7e1cd686f1ac166382eda681b663fd84128b","first_seen":"2025-10-15T22:22:25.996133Z","last_seen":"2026-09-02T02:01:06.329145Z","times_seen":6,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":222,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.ru/favicon.ico","fqdn":"hovarstour.ru","domain":"hovarstour.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.573Z","timestamp":1788314410573,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hovarstour.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T16:18:01.529784Z","times_seen":18238627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Josefin+Sans\u0026family=Montserrat:wght@400;500;600;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.739Z","timestamp":1788314409739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Josefin+Sans\u0026family=Montserrat:wght@400;500;600;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 02 Sep 2026 02:00:09 GMT\r\ndate: Wed, 02 Sep 2026 02:00:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10965,"size_decoded":1454,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6fb3613376fdc7132f666c2ff0b8f501","sha1":"3c321b95f453183e6a97343a62d0ae5ed4ee1b2c","sha256":"32ab3f0bd1c870fda0cef2322a0d8934f473be743af8b889435f6798eb54907c","sha512":"12cd8454e2e1457f993ee26a2b2e40ff0462c2d984647e60135fcff5d98aa102f9c7e6fd06b275832aa389bd612b58045533595a0690254c51bfb87762428190","ssdeep":"192:crlK+3Ro7TbOmuwRv7M0OFupRS719Ocu6RB7W+OjuMR77wIO5u8:cFQPTzajdmPE","tlshash":"ba32ee91105be500eb471cc923cf7e26dd4e61627494c579affe2ca8adeac260325b3d","first_seen":"2026-09-02T02:00:58.342563Z","last_seen":"2026-09-02T02:01:06.331027Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":37,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/DL2bVvNG4nbljGG83mD0.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.910Z","timestamp":1788314409910,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/DL2bVvNG4nbljGG83mD0.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 125121\r\nLast-Modified: Mon, 08 Aug 2022 19:18:58 GMT\r\nConnection: keep-alive\r\nETag: \"62f161a2-1e8c1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125121,"size_decoded":125365,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 845x557, components 3","md5":"3eef4e682327ca3b43467bcd8ea76379","sha1":"33856fe9d0b11240454b0807096fdc82e3942cb4","sha256":"9819c123e5c73501a7f5c4ef95b8a924b3ab08dc60a3017b59fc7355bcd75d56","sha512":"cada80d131055f041446ff3cf07e4f696da59be871e2aca2cd5bca5fef825e26d3cee7dadad2f4cc6ee622af8146602969e5ea966224d9ac9dbd5ced152fac25","ssdeep":"3072:z+BIUpM61wgYNLvKTMeL9wJjv98/Cf8RZQQ3IgB//tAE:zq56haWJe/LfNj","tlshash":"eac312230df63e57906c18fef14f2d0d24944833ad2a88793689ddda93659e7c981cde","first_seen":"2026-09-02T02:00:58.344303Z","last_seen":"2026-09-02T02:01:06.310679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":37,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.allwidgets.ru/s/callback/vendor/intl-tel-input/img/flags.png","fqdn":"app.allwidgets.ru","domain":"allwidgets.ru","tld":"ru"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.886Z","timestamp":1788314410886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"app.allwidgets.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 16:30:15 GMT","end":"Thu, 22 Oct 2026 16:30:14 GMT"},"fingerprint":{"sha1":"D6:B4:46:03:47:0D:2E:B6:C8:1C:9F:D9:DA:9F:98:2E:FC:B3:DB:52","sha256":"A2:73:1A:27:9C:DB:5A:D2:EF:2F:01:D4:95:24:1C:C0:E6:F9:C0:EF:E5:3E:A8:3F:15:A5:E7:87:AA:09:74:F9"}}},"request":{"raw":"GET /s/callback/vendor/intl-tel-input/img/flags.png HTTP/1.1\r\nHost: app.allwidgets.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://app.allwidgets.ru/s/callback/vendor/intl-tel-input/css/intlTelInput.css\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:00:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 70857\r\nlast-modified: Tue, 01 Sep 2026 19:20:39 GMT\r\netag: \"6a972587-114c9\"\r\nexpires: Wed, 09 Sep 2026 02:00:10 GMT\r\ncache-control: max-age=604800\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nx-request-id: f15b3c27ec0e393f213bbec7b2d07fc8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70857,"size_decoded":71469,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-09-02T16:24:29.748164Z","times_seen":25984,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/js/script.js","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.781Z","timestamp":1788314409781,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:09 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 566384\r\nLast-Modified: Fri, 19 Aug 2022 12:47:26 GMT\r\nConnection: keep-alive\r\nETag: \"62ff865e-8a470\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":566384,"size_decoded":566640,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29630)","md5":"3f81b29be6769218c79d553c27febf55","sha1":"b56236a929a105e733dfebd231d54e6b6dd66dde","sha256":"fb40efd79afd3c0dfe39a0c71748a39851aff187ed63e4be50e01bbe4f132e8e","sha512":"1b300ab3db72751a085bb1171cfa19966bdcceb725d31fc353598f73762abd582c0c63ad75de36369917b91bc77915d51b66756b116c187a25da169070ef4375","ssdeep":"12288:3SFemHFgymkplyHCcmM0/W/EEwKvQRgPrVhDdRlb:0lyHCcmM0/W/EEwKbhhDdRlb","tlshash":"0bc4a6c9f39c266a867b32595c2e02cd723d8075d600587ebc5d59dc2aa883c43bbf79","first_seen":"2026-09-02T02:00:58.347081Z","last_seen":"2026-09-02T02:01:06.308386Z","times_seen":2,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":69,"receive":142,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/cart.svg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.836Z","timestamp":1788314409836,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/cart.svg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 512\r\nLast-Modified: Wed, 03 Aug 2022 09:14:45 GMT\r\nConnection: keep-alive\r\nETag: \"62ea3c85-200\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":512,"size_decoded":754,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7afb3b361c21c00a1f52d9c8189f990","sha1":"c7301145c39782d9af1851b72088fdb0de8c2dd6","sha256":"ac35a07c5791f45fe7486bcbdcc3334aa6db3ef3d1faa1e6a5ba33684e5c1ef4","sha512":"6c45c2388f73e1f2c9bdaaf826992981c72ebaa6ca620d6e4785fea3a243b42c4258c5180212050177e97623a69355be5ad2d01938bd652562dd4b647fbaadb9","ssdeep":"","tlshash":"35f05960852ba3cc747bcc3715e9586c2024b283309b93fcfd928686f2036ddf991104","first_seen":"2026-09-02T02:00:58.349372Z","last_seen":"2026-09-02T02:01:06.29915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/social/whatsapp.svg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.952Z","timestamp":1788314409952,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/social/whatsapp.svg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 727\r\nLast-Modified: Wed, 03 Aug 2022 17:23:27 GMT\r\nConnection: keep-alive\r\nETag: \"62eaaf0f-2d7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":727,"size_decoded":969,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6804a95fa3a8cfb09cd213dd63495c58","sha1":"c5aa2fe26d4a8aaca723ff8235e362fefe82543a","sha256":"f9869442c916daae03cd1d553005257f54bc3d7b38cfd02526ce0bbe2dec82c2","sha512":"2674100696cc75d609f6aa644e063f88afed477e5fe6b763e6cacc11564dc0b72e42f9a6ef2b56703176ec502a3eeb49e5f770c58a896e64a875e64b271404c8","ssdeep":"","tlshash":"f70115af031d68c550af4739ffbca01e251160def5a5c0c553ba355e31033a89a43d00","first_seen":"2026-09-02T02:00:58.350898Z","last_seen":"2026-09-02T02:01:06.337677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/September2022/yfycs8GxUUVajLo1xWdY.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.872Z","timestamp":1788314409872,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/September2022/yfycs8GxUUVajLo1xWdY.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 394930\r\nLast-Modified: Sun, 04 Sep 2022 08:49:27 GMT\r\nConnection: keep-alive\r\nETag: \"63146697-606b2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394930,"size_decoded":395174,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 960x1280, components 3","md5":"8e9672d9f054f1981403d6cdc3957d46","sha1":"cc3a89f6ae16a84e5434e70bf4c920b4808ecf58","sha256":"2a798b3144f218308095e0356374d36df9fc1aa67e1a7a4e1a698b519ea0e574","sha512":"baab4e5566c0819354fa93ec1961c7682658fd49ef64030c3a30d4b843888fb2a729c1cfb65c5a71bd365f59a6159e11ac3603e368bea9e80c6990db3383f264","ssdeep":"12288:JMLFISmS3lUNPT1ZqYmLhBND04T5ZIpKM2XTNeBHup:iL/mS3snqY+DXFypKL5","tlshash":"b7842316aa3db1109686f42fd5c2679f5848b3e407a54728ea2c0abb17f0ff460db53d","first_seen":"2026-09-02T02:00:58.352302Z","last_seen":"2026-09-02T02:01:06.324853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":36,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3PZQNVED7rKGKxtqIqX5E-AVSJrOCfjY46_DjQbMZhLw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.172Z","timestamp":1788314410172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3PZQNVED7rKGKxtqIqX5E-AVSJrOCfjY46_DjQbMZhLw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hovarstour.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12372\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:41 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:12:44 GMT\r\ncontent-type: font/woff2\r\nage: 574109\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12372,"size_decoded":13185,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12372, version 1.0","md5":"ccd50708b487ce4ec0a8c9b249e2ec88","sha1":"42ae03669ac5d6b26d9aa0a60565dce0b2947b71","sha256":"242e98782313218a60ac5397a94a49bbe4cf3dbf4ca31039acacd801d957b13a","sha512":"f4a9889f608e0ffa6f873c3e9da59ba85189f77c6b6b6d6ae1d4476526db60c31898e3479a3de1f90b7e8f71582b2589388e5c792b59cfef0b1204168a26aaec","ssdeep":"384:VQ/SMn+Yok6n+ge9AykqOK2JQ5dYQYY4y8:CVBqcaqZV4t","tlshash":"5142d116ce3f25fdeed0797c61728ea8dc188990c44a47f3d2a117626fa738610c68a9","first_seen":"2025-06-04T11:13:02.707548Z","last_seen":"2026-09-02T02:01:06.3194Z","times_seen":1432,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":42,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.748Z","timestamp":1788314410748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:56:10 GMT","end":"Wed, 11 Nov 2026 10:56:07 GMT"},"fingerprint":{"sha1":"F3:18:40:3B:2F:29:8F:72:5D:C9:F9:8D:83:FF:1A:13:26:F5:A1:7A","sha256":"17:EB:45:1D:BC:F6:67:CB:CB:85:0A:03:6F:55:93:30:F8:33:F4:78:1A:C0:46:17:64:09:C8:78:62:38:02:5D"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hovarstour.com/\r\nOrigin: https://hovarstour.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:00:11 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: GET, POST, OPTIONS, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://hovarstour.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2xiKsagFURNvhwC91QCL6rOVlY6%2FXSVx%2Bk4fodmfQqHsr0pZ7D5s%2BpwYc2Z%2FrN%2FRyafnX4K9X2mBeu1yzSQlxLRj3rOuwog5ld3rmjuTAzu7b%2BeJjVa5doz3\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eb6b59d3569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2143,"mime_type":"application/json","magic":"JSON text data","md5":"878adf64487b5ba37608106f8e269077","sha1":"b0ef56570413b25e55b2ad3f36609fd8ead6d116","sha256":"aa56dfcb6ef80ed825a55643ec8581ae4b1cf25f703dd7c66659f02420872662","sha512":"352bc3c08398b375bf697c19b0a26af887e9a5e8b9c0b0e66d4d94028803ad4080db7f9597e46af7dbdb1111368f379484fa63f04376afe010a7c86a464b8f34","ssdeep":"","tlshash":"0301df68e4780e7b9cb813987078691b113422176e563a8e7bd4a74d0f8d9bf30b135e","first_seen":"2026-09-01T12:09:39.774459Z","last_seen":"2026-09-02T15:53:47.625287Z","times_seen":43,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":7,"connect":2,"send":0,"wait":253,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700;900\u0026family=Open+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.735Z","timestamp":1788314409735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;600;700;900\u0026family=Open+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 02 Sep 2026 02:00:09 GMT\r\ndate: Wed, 02 Sep 2026 02:00:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33691,"size_decoded":2768,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4bb661aac2b70bf34ee074fc13d260c8","sha1":"19e98ee0df9d85e88bc0c79fc2a3b15691e1e24b","sha256":"1af224e06cac560a74341d016cb936ad658fbc140406346a7494913f5121237e","sha512":"244dbd0a32be127349c4d672112fa6bbbcf59c690884c04778aae21de9e03ed5fc6f178855207089f0ef292cadc4e015fbfea71be49bd87ea1f6a00b45b6092a","ssdeep":"384:4QPTzajdmPat5qY4tMgqY45f/qY45uOqY4P:0hnwYzFCo","tlshash":"e6e2fc900017a800ab471cd623ce7f35ee0fa2667044c07a6ffd5aaaeedad25537572d","first_seen":"2026-09-02T02:00:58.355841Z","last_seen":"2026-09-02T02:01:06.3471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":108,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/search.svg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.842Z","timestamp":1788314409842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/search.svg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 409\r\nLast-Modified: Wed, 03 Aug 2022 09:14:45 GMT\r\nConnection: keep-alive\r\nETag: \"62ea3c85-199\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":409,"size_decoded":651,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d93a582a24987a26a00a1213233bd1aa","sha1":"7243621b0a7dd722f225298467872c1dbb780b34","sha256":"78bb9cf3dda068e88250d0d68ae315ea4cadcef2a868eb3134a3ee9791c3a78f","sha512":"5148b7934c0dc00d6f9d13e7326e2df32d7b6580dbfcaec7a9d02f23dc476cc1207205d54022c1c581a93f84efb68b587e353fdfd72a4a2e8b0267342c3b7baa","ssdeep":"","tlshash":"b6e09238d668194b1f5cc7fd48745970744b125a80e31279cab26ed425ab0f65be8bcc","first_seen":"2026-09-02T02:00:58.357495Z","last_seen":"2026-09-02T02:01:06.322686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/Ibo7msocxlk0IWN93tcS.jpeg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.858Z","timestamp":1788314409858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/Ibo7msocxlk0IWN93tcS.jpeg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 228308\r\nLast-Modified: Fri, 05 Aug 2022 08:17:01 GMT\r\nConnection: keep-alive\r\nETag: \"62ecd1fd-37bd4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":228308,"size_decoded":228552,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 1239x821, components 3","md5":"e15b00779d9767904a938712fad2a812","sha1":"4e821f68ccbbc0fd119b57c4da17ed20ddf5b9a6","sha256":"2be854846cf67ac8bfed5020ba8b6297a431c4d7ffda8309e650762634791da1","sha512":"cdb0e0204e986bea970934c85c9e942b3ba88b755bf58fea9a40c50ea0cb49746618f4416b953250a718105d0d5f72fe1985fe826a5923a3fb873d6cba74f1d3","ssdeep":"3072:OKRNJm0GsGIaKkeB2sqC2mAXaH4sJWII+NIHDmNLiqut68b89EvKYBTWLDt7TneM:OKNm0Gs1B2ipAqH4G3r0gLifkHZTNF","tlshash":"e42413b52d02b25b0b4983f5e5094fa825bca9ee410af21e67559dccf7e247bf066c0c","first_seen":"2026-09-02T02:00:58.359162Z","last_seen":"2026-09-02T02:01:06.316675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":1,"connect":37,"send":0,"wait":73,"receive":108,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.166Z","timestamp":1788314410166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hovarstour.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:39:18 GMT\r\nexpires: Thu, 26 Aug 2027 10:39:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nage: 573652\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":24589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-09-02T09:47:37.96618Z","times_seen":10552,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":33,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.allwidgets.ru/s/callback/css.css","fqdn":"app.allwidgets.ru","domain":"allwidgets.ru","tld":"ru"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.745Z","timestamp":1788314410745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"app.allwidgets.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 16:30:15 GMT","end":"Thu, 22 Oct 2026 16:30:14 GMT"},"fingerprint":{"sha1":"D6:B4:46:03:47:0D:2E:B6:C8:1C:9F:D9:DA:9F:98:2E:FC:B3:DB:52","sha256":"A2:73:1A:27:9C:DB:5A:D2:EF:2F:01:D4:95:24:1C:C0:E6:F9:C0:EF:E5:3E:A8:3F:15:A5:E7:87:AA:09:74:F9"}}},"request":{"raw":"GET /s/callback/css.css HTTP/1.1\r\nHost: app.allwidgets.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:00:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 19:20:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a972579-86fd\"\r\nexpires: Wed, 09 Sep 2026 02:00:10 GMT\r\ncache-control: max-age=604800\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nx-request-id: 2039882de0074abdb809e8ed3af2ef3b\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34557,"size_decoded":5101,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (425)","md5":"607bd60174a871c5ede253b89cc084aa","sha1":"998df6880cdd5751b4fcb5960369258d8f614b4e","sha256":"96bb498a29818e362145960ceaf8549e8686ceb038204d0ef74d3d4971fca7f1","sha512":"54d38ae84be3d91d017ddf8f674e7724ae4a26c4fe88f1ee0bbe8da4b3ce8f05590b40f34f7401d83331de8a9d1b6699d5799fbb839f3505b896844f35b52b98","ssdeep":"384:dumnsqmr9XYokVa9XB8CHAXXToHAXX3AFkNnSFXFX1Nw:dumn8r9XY/a9XB8jtAFkNnSFXFX1Nw","tlshash":"6ef2c2a926220644bb27479c23ce5b243338b4537917ddbfb6ce284c8fc5ad8199671f","first_seen":"2025-09-23T11:21:06.182728Z","last_seen":"2026-09-02T02:01:06.29447Z","times_seen":8,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/SI6a8PtGcszKJjrjK7dc.jpeg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.866Z","timestamp":1788314409866,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/SI6a8PtGcszKJjrjK7dc.jpeg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 226018\r\nLast-Modified: Fri, 05 Aug 2022 08:18:20 GMT\r\nConnection: keep-alive\r\nETag: \"62ecd24c-372e2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":226018,"size_decoded":226262,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 1200x801, components 3","md5":"ce143cfac584c8cc7d2c80e3a17a2b32","sha1":"88a6bc4583af4e2257c033e66a018bc0432716eb","sha256":"2403af7efd690f8370c50879391e73240d1fd415b4a9f4eab1a2110318166b92","sha512":"90099a0b93ef052f2f7c907812bdeac331757eed9fc8a41a391d55daa098045c1394ae64a44b3f8b05b034cc6c44e105634c53b2acbdf1b5710630c46d8b5ceb","ssdeep":"6144:U3pKxjt0Oq7fvmuPQ2gQ6Rd79urOCBTrc0pCE:U3O6zvLQzRd9j6rc0pCE","tlshash":"a22423af4263c5299e555e77400b8d8e48a88e754a5627f0fef2c273323beb07d09958","first_seen":"2026-09-02T02:00:58.36417Z","last_seen":"2026-09-02T02:01:06.309448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/2.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.174Z","timestamp":1788314410174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/2.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/css/style.css?1788314409\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1134754\r\nLast-Modified: Wed, 03 Aug 2022 09:14:45 GMT\r\nConnection: keep-alive\r\nETag: \"62ea3c85-1150a2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1134754,"size_decoded":1135000,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 4096x2731, components 3","md5":"cb7a777fde49a65b287d0293d8f1b1b3","sha1":"3161a363c3f29ce69497a2d20eba9109cf915e33","sha256":"3b2cde317ff49bb6ac67fcde5ccb071d11b51b02164df5ed575fbfa7e66d4339","sha512":"64b778985513af50bafe70cfa77d94cec90812449ce3d8f32954e2f3ad3f33326ec9e194ff3d88af0e61b0795a8363c6d3cd5402323603237b4592950e986e43","ssdeep":"24576:rJqWAFPdsKP5/venKI1C0nE//S0LFED1dyJ7iwmDA75s:PkPeu/QKK6SqFEWnm8s","tlshash":"572533e2026cbfa3ec31b671a39a6951f3d5f6bc4270475a4e014c7c24b8b6cd868f59","first_seen":"2026-09-02T02:00:58.367073Z","last_seen":"2026-09-02T02:01:06.343494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":35,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.776Z","timestamp":1788314409776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 01 Sep 2026 23:02:20 GMT\r\nexpires: Wed, 01 Sep 2027 23:02:20 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 10669\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":31382,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-02T15:51:19.49174Z","times_seen":144288,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":10,"connect":35,"send":0,"wait":17,"receive":17,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/nQlrQQG8iwBplUgZ8qa0.jpeg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.849Z","timestamp":1788314409849,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/nQlrQQG8iwBplUgZ8qa0.jpeg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 119924\r\nLast-Modified: Fri, 05 Aug 2022 08:15:13 GMT\r\nConnection: keep-alive\r\nETag: \"62ecd191-1d474\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119924,"size_decoded":120168,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 1280x650, components 3","md5":"ff9a9097a0629fdf76acd1dd32d8316c","sha1":"d437d5696f11d3dbade31b7cce74f8983338ae9e","sha256":"2102181ae3f8383ced04c6bd2f8b776847833cac9e07ecde52a3a9c177b8d128","sha512":"a3176594e9538abeae579ac1c78ccf2b3699d3ef9763a0bc78079f74520367bc4bfffa58d9bf0ba5239dc6aa24ccc2fddecb76a75be7b3e221fc2a9059ccb032","ssdeep":"1536:0+fL/W17Qnpl6tSwbe/obo3ncft8hq5YWE5W31yB4O8Bnkz2Yr05QEFMp3MSo0/l:aDxO6Go5l+8nXR5LQ0MNmRQdR","tlshash":"afc3126f3896324ac748ae8556bcfb45c566f0d37223ccb2834126b2da7f81bb14e54d","first_seen":"2026-09-02T02:00:58.370098Z","last_seen":"2026-09-02T02:01:06.34888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/css/style.css?1788314409","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.743Z","timestamp":1788314409743,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /css/style.css?1788314409 HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:09 GMT\r\nContent-Type: text/css\r\nContent-Length: 80094\r\nLast-Modified: Tue, 13 Dec 2022 10:43:35 GMT\r\nConnection: keep-alive\r\nETag: \"63985757-138de\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80094,"size_decoded":80335,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2515)","md5":"c71cda1dd74d1a99edf03aa1e0dbc7d4","sha1":"df6ae307cf8ed75edc46c48d2521e8cfd0bc0759","sha256":"1b6479cf840b435b8be159fbc802a2fbfba0d0ae5264289de6fa9b3422ef8614","sha512":"f7428a362d62bed6b53289f05df88f9415d7a74e9dba72c155aa0ccea9b3d6adac5b45a8af89156889b6798c0edee39096ec7173c2158bfb30be43f43bc44f87","ssdeep":"1536:UTMo06+p2ovq9pb0WEGXACoEby8/Wx4ybWAeFgye4jEKwFFBW5O4:UTzXACoE/","tlshash":"ae7387606bb32d08751fd1642492e7e2b32f5182c90ecd7c66f6344c9fc91e498a7ea5","first_seen":"2026-09-02T02:00:58.372651Z","last_seen":"2026-09-02T02:01:06.306917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cp.callback-free.com/api/js/form-builder.js","fqdn":"cp.callback-free.com","domain":"callback-free.com","tld":"com"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.794Z","timestamp":1788314409794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cp.callback-free.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 07:51:06 GMT","end":"Thu, 12 Nov 2026 07:51:05 GMT"},"fingerprint":{"sha1":"78:FE:7A:98:8E:F3:23:9F:FC:89:9B:3C:2C:CB:8F:A2:4E:BF:CC:D8","sha256":"FA:4A:AB:15:18:02:7E:3C:07:41:54:C8:59:84:77:FD:6B:52:66:EA:A0:8C:20:A0:84:30:73:88:F4:5B:EC:DA"}}},"request":{"raw":"GET /api/js/form-builder.js HTTP/1.1\r\nHost: cp.callback-free.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:00:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nx-request-id: ca9669de6c9ba071b0f8b6932f1a34df\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15649,"size_decoded":4245,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (449), with CRLF line terminators","md5":"e475c827304e65cc5af78511efc0298f","sha1":"e37338e8a2c6d34d2ea4a2c1a11d7ac8d6aded06","sha256":"eabf89162514d9e5ec81962647dc58e0ed08da4192421212a88a817c9f009f40","sha512":"0516d1bb937b8968aa36ff10511d72e6a3f12b53ecd93c32eb09dbc22e44193348ec5b84f15173b1bdc691a7bdb6fea06237bfc10159f07b8e21678fc4b5fef8","ssdeep":"192:wZkHE56jJssTAhi2CYEiyTUcOhGbuXg4GLxB6FZbQAQ1QKOzQgQFQas:wZzsTAh/MjTUcOYbuw4oB6FJIg+s","tlshash":"ba6221247b0ec5224ef6f32f4275438af5ad91a79c8e80537d2e96583ff048a43a1dd2","first_seen":"2026-09-02T02:00:58.375782Z","last_seen":"2026-09-02T02:01:06.315715Z","times_seen":2,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":67,"connect":32,"send":0,"wait":31,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/logo3.png","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.808Z","timestamp":1788314409808,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/logo3.png HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 522970\r\nLast-Modified: Tue, 13 Dec 2022 10:43:35 GMT\r\nConnection: keep-alive\r\nETag: \"63985757-7fada\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":522970,"size_decoded":523213,"mime_type":"image/png","magic":"PNG image data, 1238 x 728, 8-bit/color RGBA, non-interlaced","md5":"984b4904addfa801c7d45219f120f745","sha1":"30ed4cddc2f772915a2e86450790157d2bfb0ef2","sha256":"41b2c50d7d6ba95efaf9561e618cea6ae78485374d707a60f3b024fe33d72775","sha512":"aa20b9ad227fac59e094e32ca21b0496ac4d06cbcffa43c252531e07ae5903abdfd5834ea5bd1ba8c7ef7d292e9fe0ff22c9c05dd2b0372c209ff201420694bd","ssdeep":"12288:lyzJFLmY+WCUd57+xb9DiMZIjSjbfwh1UfAx+ScxsgMu:CFAUb7+xbpvZIjSfYh1USlu","tlshash":"ccb423799cf04113db22443584f108f29b9f3a714916baacf715a122da5b7ec1fca9ce","first_seen":"2026-09-02T02:00:58.378784Z","last_seen":"2026-09-02T02:01:06.297758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":35,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.allwidgets.ru/s/callback/vendor/intl-tel-input/js/intlTelInput.js","fqdn":"app.allwidgets.ru","domain":"allwidgets.ru","tld":"ru"},"ip":{"addr":"82.146.43.165","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.575Z","timestamp":1788314410575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"app.allwidgets.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 16:30:15 GMT","end":"Thu, 22 Oct 2026 16:30:14 GMT"},"fingerprint":{"sha1":"D6:B4:46:03:47:0D:2E:B6:C8:1C:9F:D9:DA:9F:98:2E:FC:B3:DB:52","sha256":"A2:73:1A:27:9C:DB:5A:D2:EF:2F:01:D4:95:24:1C:C0:E6:F9:C0:EF:E5:3E:A8:3F:15:A5:E7:87:AA:09:74:F9"}}},"request":{"raw":"GET /s/callback/vendor/intl-tel-input/js/intlTelInput.js HTTP/1.1\r\nHost: app.allwidgets.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 02:00:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 19:20:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a972587-17787\"\r\nexpires: Wed, 09 Sep 2026 02:00:10 GMT\r\ncache-control: max-age=604800\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nx-request-id: e068cd8a79af23c0984c800c3390d521\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96135,"size_decoded":22621,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9977)","md5":"82fcb5287da84c1f4382a4326e3213ec","sha1":"74a45be71424ac250f408e6713e8e40e5719bbc5","sha256":"5ed999cb99411ce32a1646ec092627e7d472ad4fac67ac3d29c7b773d2706629","sha512":"9826963b147a27271091c1bc84c53d0b2a9e400763ec022d5c2f094c1f11b47b38e769f43036c670b7d2f1c6c540d266ca4e5a7a1ca0197972df5c91331f0449","ssdeep":"1536:ghnxcDdGYJtvCfVHlYCRtWPRdg8sdS6opFM:6eVCfVHlYCRaREdS6MM","tlshash":"4e93b41ea7e703279cb3e17a6faf504e62648517460acc143c9c97c81f8d87586f6be8","first_seen":"2025-09-23T11:21:06.137102Z","last_seen":"2026-09-02T02:01:06.304924Z","times_seen":8,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":27,"send":0,"wait":29,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/css/custom.css?1788314409","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.747Z","timestamp":1788314409747,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /css/custom.css?1788314409 HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:09 GMT\r\nContent-Type: text/css\r\nContent-Length: 1407\r\nLast-Modified: Sun, 21 Jul 2024 01:36:23 GMT\r\nConnection: keep-alive\r\nETag: \"669c6617-57f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1407,"size_decoded":1645,"mime_type":"text/css","magic":"ASCII text","md5":"ad26fad0bf80333332b1d6ebb1b4c9cb","sha1":"73da55ccb0cf25b9ec3ddc2a98dfd6f6260dee86","sha256":"0943816c94a4bdc11581b2f31427b3f714e1c3b92dcb4478aba4469b27c828e1","sha512":"97daf6023c866273ea928dec51716ccdef2f4c3d5bb37a1670ef3fb70e6576fd8a9c4cf36f8049ba1479c94df839a083215d7375b5aa3333e1154cad7677c7ff","ssdeep":"","tlshash":"ca217816eae33582f112d42c2b6a6baa325d5003404eed397e4c73584f8d591cae2b8d","first_seen":"2026-09-02T02:00:58.384946Z","last_seen":"2026-09-02T02:01:06.313956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":32,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/September2022/ud2P1ELZN0ZwhYodESBP.jpg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.924Z","timestamp":1788314409924,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/September2022/ud2P1ELZN0ZwhYodESBP.jpg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 126266\r\nLast-Modified: Tue, 06 Sep 2022 20:13:03 GMT\r\nConnection: keep-alive\r\nETag: \"6317a9cf-1ed3a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126266,"size_decoded":126510,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 719x1600, components 3","md5":"4d7cb02910a3baa9daa5a0f2be31a71e","sha1":"e62f0aecdd17157809baec41144b9a9b12014f3e","sha256":"8d309bdb2b028cea30d1dad052fadaa1d2e8b135bfb438ca63289bb7027094bf","sha512":"df232ea7084d8e5df1b5fc20db8895b9632e9c55a6eedb14e5286c25b33389581f0d3c3eb17a7ba4e1edee56dd3254e148b112c772e138bd8779e73539c0765e","ssdeep":"3072:iTrVc+muNWxgQ+1lflAr6kKhKmzmzX++QQ+yQ47UaqySQfS54:duNWxd0bAr4KmzmkQr7U8fS54","tlshash":"bac30203a4026660a940f7b5fe938cde9d7a722c371736fe1e665677964ae9c200cd3c","first_seen":"2026-09-02T02:00:58.387527Z","last_seen":"2026-09-02T02:01:06.326015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:10.170Z","timestamp":1788314410170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hovarstour.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:39:18 GMT\r\nexpires: Thu, 26 Aug 2027 10:39:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nage: 573652\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":24589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-09-02T09:47:37.96618Z","times_seen":10552,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":47,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T02:00:08.958Z","timestamp":1788314408958,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 02 Sep 2026 02:00:09 GMT\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; expires=Wed, 02-Sep-2026 04:00:09 GMT; Max-Age=7200; path=/; samesite=lax\nhovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D; expires=Wed, 02-Sep-2026 04:00:09 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-02T04:00:09Z","raw_expires":"Wed, 02-Sep-2026 04:00:09 GMT","max_age":7200,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; expires=Wed, 02-Sep-2026 04:00:09 GMT; Max-Age=7200; path=/; samesite=lax"},{"name":"hovarstour_session","value":"eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-02T04:00:09Z","raw_expires":"Wed, 02-Sep-2026 04:00:09 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D; expires=Wed, 02-Sep-2026 04:00:09 GMT; Max-Age=7200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":64769,"size_decoded":9034,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (367), with CRLF, LF line terminators","md5":"36ea50b863de38c9a28847fa83040f8a","sha1":"2c2fb4f4e99175c3030cbc0bbc40a294dd6f4a54","sha256":"f09fc0f2aa7d573062006bd9f8dac7021b888123d64d957f37be666b393666be","sha512":"96287734698df7054bba6ec0ce64de698a9eefa4f3802a2965771302bd8907120ebde7620abd0c6972b3bc7483486fbbad4bd59fe202fd8f9b3dd6a7be2de3d5","ssdeep":"384:T93j9644h6f/wTUJwgvt1oKoQD9UloSOTUK+/KDHpV6316s:9j9644wwToHt1oKoC9UGUOHpV6316s","tlshash":"265300b1a5f504b70152d6d3ee28af0abec1c25bcb5b521171fc0a996fe7d96ca2310c","first_seen":"2026-09-02T02:00:58.389676Z","last_seen":"2026-09-02T02:00:58.389676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":5,"connect":32,"send":0,"wait":129,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/gtXHTkM2x5GLBYuKPLiJ.jpeg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.862Z","timestamp":1788314409862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/gtXHTkM2x5GLBYuKPLiJ.jpeg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 75421\r\nLast-Modified: Fri, 19 Aug 2022 15:39:47 GMT\r\nConnection: keep-alive\r\nETag: \"62ffaec3-1269d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75421,"size_decoded":75664,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 896x592, components 3","md5":"16c3878a623c4fb8960244aa47238b25","sha1":"3f3342697abd8ed8ceb108ff590cfa367db3cc81","sha256":"b199265bae3e8422c904e9d54372f3ccc5da63669a82583be67d530e48937bb3","sha512":"deba6f18d627267cfa462768042dfa74ebc4b949c1709c2a44ae4fb74e7ac40c6bbe454b6f27e02a847c233a20662d6b24f46911f3d39051127333bcc0868f44","ssdeep":"1536:E7Z+SO/mPGa6rW0vLy+ico4vaM8HtlaV9S+VOIHkq:W+dgm6YLZovM8H3gIehD","tlshash":"ad7301745f26dad3df2e103ac1569ca5d1223f182d07879850bbabf8db1a5a18cd782c","first_seen":"2026-09-02T02:00:58.39225Z","last_seen":"2026-09-02T02:01:06.339024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/storage/tours/August2022/XCarg7NlAyBzASgLlgz7.jpeg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.875Z","timestamp":1788314409875,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /storage/tours/August2022/XCarg7NlAyBzASgLlgz7.jpeg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 256847\r\nLast-Modified: Fri, 05 Aug 2022 08:20:54 GMT\r\nConnection: keep-alive\r\nETag: \"62ecd2e6-3eb4f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":256847,"size_decoded":257091,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 1417x1103, components 3","md5":"c79b5c0306dae1f7f6980f12d7e33993","sha1":"85c36d4c60d5f528d0fb4ab0c5ffd118f81ca8ae","sha256":"aa74f66c0d63417c097dd944164a9e0e7c79e471257d4977e6fa1e05af8c15f0","sha512":"2519123683e80e00023610f39d0b3748cb96fddbe6816fe4dcf051bb091d38482b62aa73aede0ea25901ec018fcab735955c6cf4c20c921c0b4949b2529aee9b","ssdeep":"6144:WlYe7KulRcFrzGynWPWhiDkVG/w+iP8P7DnaBnqpDIUe3:WlYeuuleFOynW+AbYpP8P77+wi3","tlshash":"10442384e3b001506fd966649ee927fdd903790f3460e1a4f929353ae5e6e204f9b0fb","first_seen":"2026-09-02T02:00:58.394462Z","last_seen":"2026-09-02T02:01:06.351651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":36,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/social/viber.svg","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.943Z","timestamp":1788314409943,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/social/viber.svg HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2754\r\nLast-Modified: Wed, 03 Aug 2022 17:23:27 GMT\r\nConnection: keep-alive\r\nETag: \"62eaaf0f-ac2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2754,"size_decoded":2997,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fcc5059af24498b529364c1c5c475cd","sha1":"f0909e264e9b12542ba0d33a10ebe3f12bb315cb","sha256":"7c5940784a5908f4085e4e3f634aaeb2f0f0f1f37ad4573f4e4eb7c8d674d28b","sha512":"06c50c351b5b3225609ae631cde9a3f53486c0e7a4468821831e981924811f9aec9d2064ec590904320d899a1be9d03ae24a278fff57a8a4ec6b47e15942a5dd","ssdeep":"","tlshash":"bd5185caa35453fd3cc6abacdf25890d786b343afac10056c118db4858c672efa84cc0","first_seen":"2026-09-02T02:00:58.396346Z","last_seen":"2026-09-02T02:01:06.303623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hovarstour.com/img/social/instagram.png","fqdn":"hovarstour.com","domain":"hovarstour.com","tld":"com"},"ip":{"addr":"54.38.93.94","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hovarstour.com/","date":"2026-09-02T02:00:09.955Z","timestamp":1788314409955,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hovarstour.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 14:16:31 GMT","end":"Mon, 02 Nov 2026 14:16:30 GMT"},"fingerprint":{"sha1":"1E:1C:67:FD:23:4D:06:8F:9A:5E:48:18:9E:C7:A0:60:81:4E:05:05","sha256":"CD:79:4D:6B:98:57:53:E1:7F:9C:89:BE:1D:DF:E6:AB:7C:CA:7B:D4:83:55:E8:E9:62:27:B0:DA:C4:37:C0:81"}}},"request":{"raw":"GET /img/social/instagram.png HTTP/1.1\r\nHost: hovarstour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hovarstour.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik9iVm8rdWgxUG1xVGpTaXJBY01GV1E9PSIsInZhbHVlIjoiWEEwUTNOSEIrZ0xCZWhmUk9iVVg2TzVkdDdzVlZSQTd4Q3RYaVV4VHpkUHV4MmhGNlZQNVpMYStKa3lDdHcvenM5cC9XRXAyckpVOTBiSHpCRlVRdGR6UFJHdWtzR2llazdOd0Q0WnFhaEoyZGIwMExUUG9IamxzMTRQM25wdksiLCJtYWMiOiIxNGJjNDg2ZTJlZTdlOTJiYTUzNGZlZjAzZTFlMmJiOTEwOTBiZTFkNWVhMGZlOWYzOWZhMjRmZDIxYzFjYWU0IiwidGFnIjoiIn0%3D; hovarstour_session=eyJpdiI6Im52TjloNUZqMHlSSzFubDlRaDY5QkE9PSIsInZhbHVlIjoiY0xJQzAzd2JoTkdRYXc2MWtRZm1kVTdnU3VSS0JCck1HK3k0TWJJR2FsMlZmYVUyc0I4TlNlNlN0YWFIaDV6dVFzc1JhWDk1cTlwOHlmdkVTYmVOZmRyWFAxUWdIamNiVEhSdXpzQVdNam8rZHN4Y01OOXI5SFF0em5zaUxUWlUiLCJtYWMiOiI4MTZkMmRhZTk3YmQ5NjlmNTBlZDM5NTFkNmE1NGQ0YzNkMDlkZmMxNjIzYjE0NThkNDc3MDJkMWIzMDdjMmViIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 02 Sep 2026 02:00:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 16180\r\nLast-Modified: Wed, 21 Sep 2022 14:35:55 GMT\r\nConnection: keep-alive\r\nETag: \"632b214b-3f34\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16180,"size_decoded":16421,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"4a8c23476a7c20c5bee2a752a6f96e9e","sha1":"8c63d1d743da51cda0ee35407535b72b7b9215b9","sha256":"fed9f47adb23b3cfc6f6980d51cd8d737c373e4400fc48c760643b972ac24047","sha512":"00b990eaca3511da231bef4493de054da8ce2012d8e2055746124061918c90ab970cec81b5ad0f5a9684180e415586cc274f4dd1274b62630a440405f91ddbdd","ssdeep":"384:WWPRL9twDRDXtwq4sYCLVyYvUKHKpRjl9qfuR/zuxDLvl:xRLmaq4hCLVywUKmNqW5zY3vl","tlshash":"e372d1734e48135fba1cb738d97ba5aafbc4a93327b795421e12cc58e6503306b67181","first_seen":"2023-05-25T15:25:37Z","last_seen":"2026-09-02T02:01:06.34264Z","times_seen":178,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":186,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}