{"report_id":"7ce7adfe-4c28-4d12-b876-6aeef6405a0e","version":0,"status":"done","tags":[],"date":"2026-09-27T19:12:12Z","url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":0,"asn":43180,"as":"Trunk Networks LTD","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"title":"Allcitizensholdings - The people who give you extra. Apply today for credit accounts, savings accounts, ISAs, loans, mortgages, credit cards and more.","dom":{"size":143555,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6150)","md5":"70eecaab44de23d634355ed0458754b2","sha1":"39aab8d1394a8851c76b48eb540adb5a6430ffdb","sha256":"13a947982f20139ead34b773d35f6aac48d95cb9dafadcefe1c314db727ae978","sha512":"0d6fff3a472c8278b4cac3decc3e0a78e4b82beedfb710b820dee709bb5779990f96ed901d57cec505f53c395403ba22c4b3a83cb40fc8e6312cb87bd58b3083","ssdeep":"3072:yP3F1ia3rVgwmNWyS90oZE7R+CsEj3SwaiQx79:yfL3rVgwmPuUR5jCN7P","tlshash":"2fe3193265e05679418782c8e7b56265ebf68307e2018488ffbd87e11f9ece7c673198","dom_hash":"domhash41420b3b733fa7bef8796e858e48d9f1","first_seen":"2026-09-27T19:12:39.017783Z","last_seen":"2026-09-27T19:12:39.017783Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":0,"asn":43180,"as":"Trunk Networks LTD","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T19:12:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.shopify.com","ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"domain_registered":"2005-03-11","domain_rank":3587,"first_seen":"2012-06-22T18:37:14Z","last_seen":"2026-09-21T13:08:20.591193Z","alert_count":0,"request_count":1,"received_data":1551,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-22T02:55:49.598006Z","alert_count":0,"request_count":2,"received_data":5392,"sent_data":1104,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-09-21T17:55:09.249771Z","alert_count":0,"request_count":3,"received_data":295522,"sent_data":1816,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8472,"first_seen":"2021-11-04T06:37:42Z","last_seen":"2026-09-23T00:47:16.402175Z","alert_count":0,"request_count":1,"received_data":32460,"sent_data":579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"allcitizensholdings.com","ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":35,"received_data":4621598,"sent_data":22114,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-09-26T08:45:24.740218Z","alert_count":0,"request_count":1,"received_data":7745,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"wati-integration-service.clare.ai","ip":{"addr":"104.20.41.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-16","domain_rank":2256565,"first_seen":"2020-12-15T06:41:29Z","last_seen":"2026-09-20T12:54:58.872159Z","alert_count":0,"request_count":1,"received_data":13880,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-09-26T03:06:01.165901Z","alert_count":0,"request_count":4,"received_data":378708,"sent_data":1910,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.clare.ai","ip":{"addr":"104.20.41.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-16","domain_rank":1860643,"first_seen":"2018-10-06T08:31:00Z","last_seen":"2026-08-29T18:43:39.568661Z","alert_count":0,"request_count":1,"received_data":33375,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.185.17.182","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-09-26T05:50:00.799989Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":638,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-20T23:01:40.450976Z","alert_count":0,"request_count":1,"received_data":717,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":1,"received_data":7063,"sent_data":578,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-20T23:34:05.890074Z","alert_count":0,"request_count":5,"received_data":48622,"sent_data":3109,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.77.84.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-09-26T15:27:13.516607Z","alert_count":0,"request_count":1,"received_data":1576,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-09-26T05:51:49.940723Z","alert_count":0,"request_count":1,"received_data":18558,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f098aeed6f2db5bc4cc7f917e51df1d","sha1":"faaea54543b70d587209c206de37cedcdd943155","sha256":"8fac84881a4ab07d5cecc75bf988f923d0d048e3b1baa13206f5df2d23723191","sha512":"c0d4779efb73948e560059fe77c150ffe0b6a20b1e0deb6d3a702596c2e8269327c12242b39f87916a54fca8a48c0afaad379b99d569a0eed677ef8688d5eb00","ssdeep":"","tlshash":"ecd08c0bb071114b0087f005938a08883124400b01390d28368c508a3fb2f8c034e6a8","size":196,"data":"","first_seen":"2026-06-08T02:43:52.298798Z","last_seen":"2026-09-27T19:31:34.975803Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6cf63f51efd86f408918bcb878ede09","sha1":"8d8466b4b10621dcac01d7b5f37af854d429f378","sha256":"b5f32c956dac3bd679576125c1dde3f55e40e5771d3335f52346f06db0dc92b0","sha512":"23c9574c35784f49862aa248481fa0518075f1e20b27e15a86ad9d697b08ca44ee07066a37e72d4f40edd743540376f8a62b3bcf8c44edfb486a2b3d3a3f30fe","ssdeep":"","tlshash":"93317b782db62034416b209dbfcbd14835ed744b39109b44bf8cc64d7fb1960aae9be9","size":1779,"data":"","first_seen":"2026-07-27T03:54:22.643012Z","last_seen":"2026-09-27T19:12:39.10423Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"e86b1fdf5cca84d28348587a8bb9c394","sha1":"5b6870e965737d079b89b3860b762145029e34bf","sha256":"05c609af2cb50a75105666be5d41a19320bbd7f9efbee204acaff40c920629ce","sha512":"e68739bfd5daf17bcaaf4810689b9acfcff37bb0a2fa999f87f98af13ba04f1d63ea329bdc860451d971f0e2e85de438ca903c1e1d729d8e4d923424fd2c9e55","ssdeep":"","tlshash":"24810f0563c427363f7362dd5b8fa449fbb1541b9a05cc08787d1b803f2a5a193997eb","size":3826,"data":"","first_seen":"2026-09-27T19:12:39.105628Z","last_seen":"2026-09-27T19:12:39.105628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a1500b5ff08651d1669379692b46d11","sha1":"0c697c58a57c9c661067f43664f3c2ff8cd989ee","sha256":"93254785479164ab7b66c5aaab8afe1a9372a5ef5680e1082244a7ad7968c8cd","sha512":"5af29d856235bc52baf2c9d0aadebdcdbb30e82f606f8ecef38987d4ec4a256a805581243606f864cfd36ea3284f654cc8bc509f47767772faf056467947eed7","ssdeep":"","tlshash":"2451ed0563d817327a7322dd1b8fa485fbb1442b6a05dc10b82d0a947f592b193b97de","size":2650,"data":"","first_seen":"2026-09-27T19:12:39.106624Z","last_seen":"2026-09-27T19:12:39.106624Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f48ee7d9b1db7a01e182fb929acc34e","sha1":"69239d16b548507a2038f5b34326e945fc85b8f0","sha256":"91cc2fa292a6203371efbfae19c25022bc054518ad97f0b30659df6e5a39641d","sha512":"bfc21176a982f29d0eaebef3bdcadf98d0ff427c23c39cb56009728f8981dd5445b0e3d50ab66dc77d374ee9d2c387adb04683572de54dca97228fc590788d8b","ssdeep":"96:bTEwseogYIEOZI3OX3k+5IYlUkWwHGS3+:ccU+SgWmbO","tlshash":"9f91dd0467c41a763ab322df1f4fa056fbf1185ba9048c04b86d0bc07f699f0929a7de","size":4486,"data":"","first_seen":"2026-09-27T19:12:39.107604Z","last_seen":"2026-09-27T19:12:39.107604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"7179897083754b0f63f99f2d889eb615","sha1":"a3678040723248d923d3ce84435fe3e55475037a","sha256":"729b287c32291470f033e44cade6b442aa5e48ebd3e3e1b407581584dc87131f","sha512":"ec14c13bc3b2099151a3d341bf5ce63e52a05a8b3adac2e63d567d8f982dd53b9dea157e20714968e7253f4936569f9218ada5d77277de02222cbe3d11210f26","ssdeep":"192:U6h9G9PegB74KMRX7nxZ7Jh8oWKHH9BiY:7hRpdrjJWaT","tlshash":"a3f15a5862e21aa60e7320e91fcb9113eef089077149cc44786d5bc51f9dfe1922e2bf","size":7992,"data":"","first_seen":"2026-09-27T19:12:39.108682Z","last_seen":"2026-09-27T19:12:39.108682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"167550e35cc444bfacf3c56fe30f5215","sha1":"b066e58d52170c8dc092a5cb31dc82008de0f67c","sha256":"608286afb4d73d9243ab96f75252c68a28f5119f3fd212e815f2ce28ef5254e0","sha512":"12ce9b8aec7e2a2fa0cff2957058c34708f20e8f8ea38a5dcf9e789a8de64974a56b203924d0673887f2e602031202d68f1a53adf76d9f980544e3790222d783","ssdeep":"","tlshash":"3a21dc6abcb316d80b9b317e036ff01c396450560950c4023dcc98959f71f896d25ea1","size":1115,"data":"","first_seen":"2026-09-27T19:12:39.10976Z","last_seen":"2026-09-27T19:12:39.10976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbd4edbdb7f7da37461d6dc83cf43806","sha1":"9784beb6ee4df414ba397e13ea18c6e0704e29a8","sha256":"aa64331a6195b2890c298b7949bcc726c5940a68c1ada7a5155a55bc2c0bfc64","sha512":"78cbbbeec974c7d2268e7b3e041a74b74da5f2790d5a57cc1f7249a953225fb113cc64f7fdfd79cf3e4f991c4cac98f33bc03ec2ca8873212f80aab9bffeda17","ssdeep":"","tlshash":"3631cc69ec065ca3621712a761fea203202d40279c00fc293b1c9d4c0f549af697fbdd","size":1499,"data":"","first_seen":"2026-09-27T19:12:39.110735Z","last_seen":"2026-09-27T19:12:39.110735Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/utility--e9663b1a149ed7325415d903af7a04cd.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9663b1a149ed7325415d903af7a04cd","sha1":"72baeed9ddb084eec2c7ab4a7204f5e8ea211500","sha256":"4a7796925abc70b6c10466e5692eddbe3a943908413f89a3ee62eadaed34c902","sha512":"55cd191c65fee05d4fdfb76bff3b1a7efe5cfee71e3307622881a4f2646aefdf0bdab48f9aaa59fd2661ed4ab82f7424dc1683d0f0010109bf4a57e0fd6135e5","ssdeep":"192:Fwv5QkXcfgLxLYz07eeE3b/1GLNhiWOOcAYy:FwitQYz07eeE3b/1GLy9OJ","tlshash":"3802416c315f60f65de762ab70df930e6932749c646888a0bd0198d82f7db870113ebe","size":8545,"data":"","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.070368Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-29T06:05:19.109891Z","times_seen":9682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-C4Ptsyox.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b36d702e3e683b008b927b0c9b96bdf9","sha1":"ba9cc05993bba55735f2b82da0acb0831b437f4e","sha256":"f48e6ef3e5251ec45c426e1a44d7bc9bf044833a5a7eb2a9e7ab9237cbaf8c0b","sha512":"460d078654a42b5b6feae064b44e20a4c73d3d520253af8ec9d22113dbbce26c12009f1674cda006a3102fe4cdecf5a86eb47c45cf7d119b549422a84ecc8b7a","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY9y2KQgcu5UUxtvmB0:cOEIqXrP3nJwar/KqvmB0","tlshash":"c6642bc57290b03543d791a6906f1109b33a5c18580d812cf269edf67dbaec8b2b7fb9","size":322001,"data":"","first_seen":"2026-09-24T09:31:54.987317Z","last_seen":"2026-09-29T06:05:19.010952Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/jquery--f7776a013988da5365d98666c6294d4c.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7776a013988da5365d98666c6294d4c","sha1":"844c9dec57a113b5875bb882de27f97484eab21a","sha256":"ebd4de5e91181855c9a05d7ba3273f8767d040ce575a54ccfa1ec76b206a72c8","sha512":"90ed1a05e000353980f3512a11ba98ad4e6cc2a3e131393f2e710b18fb599bc25fc2e8d616d8447cb1acd0f0b43c8cc41386c3f120cc902d0bfb9d92b967082d","ssdeep":"1536:YbWKXsLGzgtAmouqbxS9BT6F5nYEw5puTME53q8u5E4R6zJBgEAMwoXkmpEPTV0Y:UJRTMEQLR6kPMwoU7hxYp+0x5ZWiV67","tlshash":"03d328cd76c6b0624ba730f940afa10bf17619a8a40e8414f0a4d4e6bcb9f895177f7d","size":135604,"data":"","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.087542Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/vendor--dff3e0e5be17804c1f3684af41f4c55d.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"dff3e0e5be17804c1f3684af41f4c55d","sha1":"0621ed2eedba67a8b83ff3c55c7c436aae54448d","sha256":"c4e88ad08a741378a1f7c46d0a4785323efdc2cdee4a2ddc5b2c5e61af9e3774","sha512":"55974b684378ea575da2381ec2563ef2ea61ceae51ea88d3fcec6caf912344948fe097aa63f31ea0a8471f3f8e3ecd806ddc1f2448d83e25a54deb53c3170e3b","ssdeep":"1536:VZdR54WyGjy3Q3uZCeI4lJrgrlj6NgcYOasdY3wtr+ZB+GP9uaFK6wJ:h6GGvBacX","tlshash":"8a73f9e4b193b1b25ac651ad703f930bb73a6815504e8420f029d8d53cfce96a1ebe7d","size":74754,"data":"","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.09325Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/js/site__bba_theme--c2eb002ea32b9e271af0.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"945f0a1c799c824a3eff5776c046ae5d","sha1":"1b06c4b5cd7e9f36c567e96252846c7ef034d1a7","sha256":"50f9f36e370e609b7fb1207bf0d816ec0842f03bfe55c849ab4d410a368f6969","sha512":"a6daf993cf5b46113a23ea7e9995f5fe884e508d579ed33b737bcd6787b9131a20f11fb8864bb84940ea6d04f3aaa958e51cf65bc31696ab847cf1324f47663e","ssdeep":"1536:I6zYBWCXLjTw4elaw0v3r2dfHrf025K3N2DeE3tnDi6UPL:XeMfvq5D","tlshash":"fc43b574b274a27743c3f186f06b764975f366a58482a404703ec9ce9dd8d8e22eda3d","size":58199,"data":"","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.08162Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wati-integration-service.clare.ai/ShopifyWidget/shopifyWidget.js?98428","fqdn":"wati-integration-service.clare.ai","domain":"clare.ai","tld":"ai"},"ip":{"addr":"104.20.41.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a0640e91730cfae6f12d54d88b47a5d","sha1":"810aa04709673072f5a0cdc68b9b827f703559c2","sha256":"2d5df1f86ad362ad342d3b15dced013e89888336cb1120b26a323be0c9d7d285","sha512":"1df9b11516fd5f1eb86ac91dab29410c061a4a87dce30a7f93d512ca428d5fba9149f9d57e732025fe5ec61da269ff26b740db817e1599f811707a4944104e69","ssdeep":"192:TNzz7VccWGfv37rfzWmgAdc3UL9NpjilrSiZ4a/3pAW/ky+RTq91CVudSvJvSv21:xzHVPXfamgAmmbQrSBU2NZmRmKg5kDWR","tlshash":"a55284b542a3101470d7a0a89be93b8517318097dc05fc793bed9ba49fdbac8a5d3f24","size":13535,"data":"","first_seen":"2025-04-01T14:26:20.064813Z","last_seen":"2026-09-27T19:12:39.029721Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Ci3sulf9.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eba624c042df6b9ab614a422c182dc2","sha1":"c66297b197c51aa94b92a9066905bfa42e2e4c8e","sha256":"42d5bb3c366ad7621e46bc942f3009ee1ea1452c905fbbdf4f1d5c3f3220d09f","sha512":"3ab1e42fcdcbe0766b7f5eb07cb796550733ad5fc7dd65ef0657fe4fdb3c73fa94ed5ad19ee8111146f92dffbe72c2c9efb42c5eaa247f449db0050510d21682","ssdeep":"384:FNtFT88tMPdBgaw5O+mvRan7/AKsDoKzwA3Q+crsbUzgfTtQfQIeI+:FNtFX+dBgaw5O+aanrkoKkA3Q+cwbUwx","tlshash":"da72f9741210743f712fac492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-09-24T09:31:55.036956Z","last_seen":"2026-09-29T06:05:19.179389Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.kcoYp1lJ1O0.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfp2u7eC3LpfxmAWk5uysGKk4ns3_g/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e46405c8728cc8b34ed3688a1f94ca8","sha1":"3024a68242c0eab18583690f6428892b6cfe8c59","sha256":"c6e12c961b704f83fef6d04325f41562d9f3070052f5cb7a88a3eed83e5e0f84","sha512":"583251746d618f39a0ded45a58b3f89e4b57e768245d351554765e3760c4af9a27c236a4df1de37cf28c8646fb8bf6e67c17d836b6016e364a99bec847d4add7","ssdeep":"3072:yDPitsvKkA7K46ku5LWw9fPJE2+nUclDcK6eun1/ytEX3cRj3g6Gl:cGuFdK+C8naO","tlshash":"5254d7dcb29670a79363f4a5517f044ab13b68a5f8084dacb288d8e26df4d09417bf7c","size":292769,"data":"","first_seen":"2026-09-23T19:53:47.923404Z","last_seen":"2026-09-29T02:29:41.936894Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/foundation--b896ce0499cb3de8725490040cef4c66.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b896ce0499cb3de8725490040cef4c66","sha1":"ebe0966c60a311d7f9e052d758c4345e06728b01","sha256":"cc92f091877cadeacd892475d0a27b8398db3b985a3692b530f555fcd3c444a7","sha512":"a7c759f2a387e979b7053b9a5d17eff76ce4b56cd98844784e810c23fd4645320fde61e9a513cdfdde747064fd29301d69c793b0e2db3fef4c8723508264e51c","ssdeep":"768:vdEhUu6z+brKUnTJFw4fIUlA+s43ag0FfYUWJrQdXjkskqrVWR7P2H:/UTF3puFfYT4XYRqrYR7P+","tlshash":"f903c54df15170b911ff65b2012f2105a1336879a82a94b4b97dc6f85eb8ecc2263fbd","size":38966,"data":"","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.088773Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/syndicatecreditunion--b40e64d95aef28c55b2c424e98fff17a.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b40e64d95aef28c55b2c424e98fff17a","sha1":"c3ffc2068641aaf1f02586749500dd0e17001c06","sha256":"44b2ebabe59bac2e6e9c3fb05497dfb7ab594c5f5737e016162be9240b644a3b","sha512":"d9ad28fd44488dd90542f7fa4b8abc7cbbf64a25c6f5feec4a3b7586d4178f7f410338fe58d5fca874a4522f17bb7f096e143fcf164e63358b7428e5c32123b5","ssdeep":"768:2wkk9p8RXA6xrRJg4F8Ksc6n2LEItH5B4Wy3vgM20BrWN73Q:22uhA2Eq8L72FkW6vgM3rWtA","tlshash":"6123f68db150307702e721b6911f520ea2376538740a447cb5b8e9e56cb8d8da3b7fbe","size":46525,"data":"","first_seen":"2026-07-27T03:54:22.632457Z","last_seen":"2026-09-27T19:12:39.101363Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/js/iziToast.min.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-09-29T00:38:36.663099Z","times_seen":3640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/js/countries.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf5d1f0fa393dceb2f0d1a2ce82adbb0","sha1":"7ba0703da9a5186bd8858c4fb268c9ec098755e3","sha256":"637ec3b27ba051cad501dc6103eefa50d24243f36c6fb060a45c3a95bb531a97","sha512":"6060e9ce05473560e7f735a77ebd9e14106099f9a69e61f5449c46fd0124a19b6f17c9ace386881349260565343375201214528ef1aff712e8e48c62904b26fa","ssdeep":"1536:hQkcjNQM4fK37wyi701Gamnc5971E+6V/XRVuixKikR:+kQyXfK378w1bn9+rV/XRVuWKR","tlshash":"42436de4b1982cbfc8faa57d8847e3125756c01ea9569c33f8d82e4d8f0e56b6214f18","size":55685,"data":"","first_seen":"2024-11-06T21:36:54.572536Z","last_seen":"2026-09-27T19:12:39.034986Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/js/runtime--016daacfa96e66426aff.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc92542295304407d1100a9b7ee95e7","sha1":"7fc5cb964ac7e5336b6e01496a0bfd1b3b58ab20","sha256":"c342afc7ce2b35e35f55f37fe37254ccdaae723892a7d99d758d5e351a7dca05","sha512":"5626c2e112375bc7f3ceae30125900ad79c0206e6347d07f6246f133746c7fa782d51242c00f049d46b64cc9934f3d4400ed9588bd121b937e91feb1a0cdd853","ssdeep":"","tlshash":"9f1180cb3ae0b98253ab78fa093f14d4e739ea610868b144c34494a63c308824099fe5","size":896,"data":"","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.1005Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ec4f6720938cbac92f930f679d41b4e","sha1":"227633838f5e04c2a6609968f1c17d6c417fcd18","sha256":"de163892ca82ab5ad38da9bee5d197827a7ce8c20025d313284f5ba0325c0c26","sha512":"70d3fb896329d7b17151ae6b36a575bfe5da1e149f999bcea7deff7729c76d734d47a4e456431a2ab1a773f92ad83310a4a3fe3449ba0b677ee0c2bd1ed7f291","ssdeep":"","tlshash":"9c51029a89b6d0dac4436c2dcfaf927931444037a811dce1bedcd906ffb050ab64d9d4","size":2990,"data":"","first_seen":"2026-09-27T19:12:39.089934Z","last_seen":"2026-09-27T19:59:30.542922Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/images__bba/sub-nav-arrow-right--a485e767c515fc67a827dfc86d56c1e0.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.844Z","timestamp":1790536298844,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/images__bba/sub-nav-arrow-right--a485e767c515fc67a827dfc86d56c1e0.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/css/site__bba--3cf347e8ff02f71b684e147f79913862.css\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 241\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":241,"size_decoded":450,"mime_type":"image/png","magic":"PNG image data, 8 x 11, 8-bit/color RGBA, non-interlaced","md5":"a485e767c515fc67a827dfc86d56c1e0","sha1":"41716caec76827de9131d9b38e36177488bfc355","sha256":"d33382bcbfcb3a9eb7d2b18f29d8d86887405e496210e949b029e8f000c2e122","sha512":"567ee08b9ec3e6a4a1db2c096a1b990d7c4b81cdc3bd8088ac4cec880a28b13fa6dba602db5d871c4c718f09dc8706b015ce289874345b2973629e8bc2969886","ssdeep":"","tlshash":"1dd095d1fa781d44a57832f60e14c444cc339243230163584595272df1e0988d158131","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.019242Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1109,"timings":{"blocked":935,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.394Z","timestamp":1790536299394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://allcitizensholdings.com/\r\nOrigin: https://allcitizensholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 29bdde8cf3b7ff891a9df4c11873e6c312746345\r\nx-77-nzt: k2d7ZreHCsKgy8JQ2yX0lE+YEYwXU/D4F5maBHnjJljHu4lumy1v8IYgWBzxANG55X8Ukmw\r\nx-77-nzt-ray: fdb5412340924043906ab96a4d9f1c1b\r\nage: 570\r\nx-77-cache: HIT\r\nx-77-age: 570\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-09-29T06:05:19.115152Z","times_seen":1764,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":30,"connect":8,"send":0,"wait":11,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/css/site__bba--3cf347e8ff02f71b684e147f79913862.css","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.898Z","timestamp":1790536297898,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/css/site__bba--3cf347e8ff02f71b684e147f79913862.css HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:37 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sun, 09 Apr 2023 08:24:30 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":638246,"size_decoded":79558,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (909), with CRLF line terminators","md5":"74f049e4e4bb3879697345c0c7709152","sha1":"1cd83bf89dbc8429b7b9fe5566637d09704e1201","sha256":"eeee31a712848e33cd4a9946d8ed23a1aa08e4a4d38f19fa60f626ddf11ae920","sha512":"d007e13beb609993e6a7f16a720ae6394de9cf2ceac808766f935ba1b61d56f5a433351fb71b77c2feaad9322a938c00240ce4454f097af256530a3affcde90d","ssdeep":"12288:gDDkHHPB6Z5gNsJ8KjBIm5xBySomdK+EyDE5i:gDgHHPB6Z5gNsJ8KjBIm5xBySomdK+EU","tlshash":"abd47215aa012106a5378b79bff22644eb305073cb9612a8bafdd184dff9994c153f8f","first_seen":"2026-07-27T04:26:53.07757Z","last_seen":"2026-09-27T19:12:39.022131Z","times_seen":3,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/images__bba/instagram-icon--a0eef40ed25c34298b52ab713d291d53.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.120Z","timestamp":1790536298120,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/images__bba/instagram-icon--a0eef40ed25c34298b52ab713d291d53.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 1750\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":1960,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"a0eef40ed25c34298b52ab713d291d53","sha1":"dfc9c0e7cd13fd9f746e4b08e9afcbbbeb3b3dfa","sha256":"b394c85bca3f0027146905176a3355d916fb095cd000d81a4898b901c466e75d","sha512":"91ad6ebddd9ca6602af8ca80a5acd345fe4d31f904f75e6d6284bdfc985b700c73f925f3ea9da00bce383db2d10936ae2a551598695214bb55aa8744559c2738","ssdeep":"","tlshash":"d5319698ea812c15b2e8c6c014e184eb66b24d94c7dae3667c4bcc5229621f854cc2db","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.023996Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1767,"timings":{"blocked":1592,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:40.225Z","timestamp":1790536300225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 18:41:00 GMT\r\nexpires: Tue, 21 Sep 2027 18:41:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 520240\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4799,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-29T15:02:35.37196Z","times_seen":39213,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/css/iziToast.min.css","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.101Z","timestamp":1790536298101,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/css/iziToast.min.css HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 28 Feb 2024 10:57:54 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41500,"size_decoded":10762,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419)","md5":"ca2f839e9a41207ce4d486b75b0dc926","sha1":"398acaa4eca2baa749a90175fe24d3c2a35f19ca","sha256":"20b2776eaee552defc7c9b25bfef14a891f0dd4a12ac7320d689d749e1ca0fa7","sha512":"d9feb978fe3c1c26cbb2efb380a70eeb7501f5631343a998abfc84766f9a6d2f1e521cee40bcff6b381515a7a1d8fb4726af583502ee23549934757766257f5c","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppGf1oWQA1","tlshash":"711345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:39:17Z","last_seen":"2026-09-29T00:38:36.658543Z","times_seen":2525,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":320,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_689c2044-88fe-4107-925c-bfe3bdfe2a3d/dot-2.svg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.110Z","timestamp":1790536298110,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_689c2044-88fe-4107-925c-bfe3bdfe2a3d/dot-2.svg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 02 Nov 2017 15:19:10 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":711,"size_decoded":694,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e188f7783adc52166e09e15d29163f5","sha1":"05f51c7792490a6fc033cfa8950a8a4223e2064c","sha256":"cedd7858d17528b7caa18b97e19bb31b0cefa960427660388403631d366c1e91","sha512":"857df1fba12fb2192acb39b72018e8146457b6da2c1f65728d1d616df70a06910df02f413f7fa33eed404beaed7a5347a3813994962e3ce3c289371825d00bd3","ssdeep":"","tlshash":"d801105c43d66e74600a42f84af5354360b970c3e6a886bce6b9bc6b41404f18420f5b","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.027916Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1591,"timings":{"blocked":1409,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wati-integration-service.clare.ai/ShopifyWidget/shopifyWidget.js?98428","fqdn":"wati-integration-service.clare.ai","domain":"clare.ai","tld":"ai"},"ip":{"addr":"104.20.41.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.841Z","timestamp":1790536298841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clare.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:12:37 GMT","end":"Wed, 18 Nov 2026 01:12:32 GMT"},"fingerprint":{"sha1":"A5:50:14:6F:45:F5:1D:44:EE:72:3E:58:BC:44:AB:5A:89:28:B5:75","sha256":"90:1B:73:48:5B:ED:3B:DC:3D:DA:51:3A:48:C4:96:7E:3F:90:2F:F5:2A:25:1B:EE:29:73:B9:92:4B:BC:A9:7D"}}},"request":{"raw":"GET /ShopifyWidget/shopifyWidget.js?98428 HTTP/1.1\r\nHost: wati-integration-service.clare.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1dd4c92727228e1\"\r\nlast-modified: Fri, 25 Sep 2026 02:06:16 GMT\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: a41cd0bbe8f12678-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":13537,"size_decoded":4787,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1464)","md5":"9a0640e91730cfae6f12d54d88b47a5d","sha1":"810aa04709673072f5a0cdc68b9b827f703559c2","sha256":"2d5df1f86ad362ad342d3b15dced013e89888336cb1120b26a323be0c9d7d285","sha512":"1df9b11516fd5f1eb86ac91dab29410c061a4a87dce30a7f93d512ca428d5fba9149f9d57e732025fe5ec61da269ff26b740db817e1599f811707a4944104e69","ssdeep":"192:TNzz7VccWGfv37rfzWmgAdc3UL9NpjilrSiZ4a/3pAW/ky+RTq91CVudSvJvSv21:xzHVPXfamgAmmbQrSBU2NZmRmKg5kDWR","tlshash":"a55284b542a3101470d7a0a89be93b8517318097dc05fc793bed9ba49fdbac8a5d3f24","first_seen":"2025-04-01T14:26:20.064813Z","last_seen":"2026-09-27T19:12:39.029721Z","times_seen":472,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":0,"dns":7,"connect":1,"send":0,"wait":399,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/ede4f41974e7db1fb4e7c92d4af201bb7ad10fd3.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.77.84.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.919Z","timestamp":1790536298919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/ede4f41974e7db1fb4e7c92d4af201bb7ad10fd3.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://allcitizensholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c4-weYJjz2l39B8RcpefpZ6tEhsQng\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1220,"size_decoded":886,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8035ea5fc7ea788bb76448a1819869e4","sha1":"c1e6098f3da5dfd07c45ca5e7e967ab4486c4278","sha256":"7bd7be7058919f6b142fc770d17fef421a1ff986fe996446b9938279a71dcd55","sha512":"e9cc0caf1c0bdcd06bbf68b4e1bc28fffc76cab3b3cbc0b4bd73112cccb8def8e36291cf89edab12b77b9053ce9df4e5ac70f5d0f05c36d993bfb5e26c227f80","ssdeep":"","tlshash":"2021987d4a6822fd5245c7d6c6047e036bacdcb371003e7de60d0a0e70db2e522364ab","first_seen":"2026-08-18T13:43:58.1472Z","last_seen":"2026-09-27T19:12:39.03172Z","times_seen":5,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":169,"dns":2,"connect":21,"send":0,"wait":26,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-C4Ptsyox.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.290Z","timestamp":1790536299290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-C4Ptsyox.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allcitizensholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ab4ecd1-4e9d1\"\r\nexpires: Fri, 24 Sep 2027 09:27:50 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: k8+9h94Uy3jEq2OfxBkorK9h9Zw4EomfEYqdVFRU/8yQJFt4+qGg0kpqEgwb0tQ6Fc1MxCc\r\nx-77-nzt-ray: e2f75420be7fec12906ab96a6bf08b11\r\nage: 294229\r\nx-77-cache: HIT\r\nx-77-age: 294190\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":322001,"size_decoded":107698,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"b36d702e3e683b008b927b0c9b96bdf9","sha1":"ba9cc05993bba55735f2b82da0acb0831b437f4e","sha256":"f48e6ef3e5251ec45c426e1a44d7bc9bf044833a5a7eb2a9e7ab9237cbaf8c0b","sha512":"460d078654a42b5b6feae064b44e20a4c73d3d520253af8ec9d22113dbbce26c12009f1674cda006a3102fe4cdecf5a86eb47c45cf7d119b549422a84ecc8b7a","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY9y2KQgcu5UUxtvmB0:cOEIqXrP3nJwar/KqvmB0","tlshash":"c6642bc57290b03543d791a6906f1109b33a5c18580d812cf269edf67dbaec8b2b7fb9","first_seen":"2026-09-24T09:31:54.987317Z","last_seen":"2026-09-29T06:05:19.010952Z","times_seen":82,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:40.116Z","timestamp":1790536300116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 20:17:09 GMT\r\nexpires: Thu, 23 Sep 2027 20:17:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 341671\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-29T14:21:15.667681Z","times_seen":75257,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:40.129Z","timestamp":1790536300129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 08:23:32 GMT\r\nexpires: Sat, 25 Sep 2027 08:23:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 211688\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-09-29T15:02:35.374205Z","times_seen":93437,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/js/countries.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.900Z","timestamp":1790536297900,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/js/countries.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 07 Mar 2024 11:52:46 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55685,"size_decoded":27412,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3572)","md5":"bf5d1f0fa393dceb2f0d1a2ce82adbb0","sha1":"7ba0703da9a5186bd8858c4fb268c9ec098755e3","sha256":"637ec3b27ba051cad501dc6103eefa50d24243f36c6fb060a45c3a95bb531a97","sha512":"6060e9ce05473560e7f735a77ebd9e14106099f9a69e61f5449c46fd0124a19b6f17c9ace386881349260565343375201214528ef1aff712e8e48c62904b26fa","ssdeep":"1536:hQkcjNQM4fK37wyi701Gamnc5971E+6V/XRVuixKikR:+kQyXfK378w1bn9+rV/XRVuWKR","tlshash":"42436de4b1982cbfc8faa57d8847e3125756c01ea9569c33f8d82e4d8f0e56b6214f18","first_seen":"2024-11-06T21:36:54.572536Z","last_seen":"2026-09-27T19:12:39.034986Z","times_seen":6,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":169,"send":0,"wait":347,"receive":3,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/images__bba/blog-icon--cc74d91b8531a68790853feae0b3df25.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.116Z","timestamp":1790536298116,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/images__bba/blog-icon--cc74d91b8531a68790853feae0b3df25.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 756\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":756,"size_decoded":965,"mime_type":"image/png","magic":"PNG image data, 39 x 29, 8-bit/color RGBA, non-interlaced","md5":"cc74d91b8531a68790853feae0b3df25","sha1":"58bc6e03f4b0614004d8f3bdae2f1fa82d812481","sha256":"97d9f6027758fdbf8bb71934fccf8ae8096630056ed7138f8f495acce1468276","sha512":"2fc077f15d98ab13cf6815cb351c97cf753a7d8dd70deab3d98808ee8f64894b7b00dce1974632b1d191901d120d33af63d7a074928147a60bb57a4ef1687554","ssdeep":"","tlshash":"52017590d7d67b33d51842e1a41c09d8e4003cb9dc230d800ca1f1d9115bf0c96e1a06","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.036192Z","times_seen":6,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/images__bba/twitter-icon--3f7b6c06d6774599eb4448015d82c14f.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.116Z","timestamp":1790536298116,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/images__bba/twitter-icon--3f7b6c06d6774599eb4448015d82c14f.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 692\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":692,"size_decoded":901,"mime_type":"image/png","magic":"PNG image data, 33 x 28, 8-bit/color RGBA, non-interlaced","md5":"3f7b6c06d6774599eb4448015d82c14f","sha1":"9644dcd32ed4cb4179bf4d757cd8db99e3c3391a","sha256":"7dc37f492fab3ca2975d97d62c45003db1a9d56216a3168d450944c36c0c0832","sha512":"4a9b7a5c3a8dd908411edf35d48f5e1136b96c7ce1fed8cbc1e1b568fc3040bf676e9d47269006801bb53f3aa0ebff471047dfb5e3b58d301425cf5a7171ede7","ssdeep":"","tlshash":"350144d18764d464f1a7ab3b34c16285088f56e19b04903cb58ebab5998c26bc9b6205","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.037485Z","times_seen":6,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_71e33b24-6f24-408c-86ba-227a1d5986a0/Car_loan_half_block.jpg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.631Z","timestamp":1790536298631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_71e33b24-6f24-408c-86ba-227a1d5986a0/Car_loan_half_block.jpg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 81833\r\nConnection: keep-alive\r\nLast-Modified: Wed, 23 Nov 2022 04:03:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81833,"size_decoded":82045,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, resolutionunit=2], baseline, precision 8, 900x700, components 3","md5":"ce6e7b2ca92ac709face6bc4f81b1413","sha1":"d72c76b9ed92df69ee19139d7e0c62e60e669052","sha256":"2cc63575cd6c0d1639786d2445ace6c3c5d0667183da1fdce941e601acf9db4b","sha512":"e54f4bad2aea62574fa124497c4d70ef79a805e21ac08d423d9345d9af9daf7cda348406c59cc63809a03d6cf23af757c776866f65030c4dd21334e386a3c4b7","ssdeep":"1536:7v2vMAP2mgveG4hIm16kNSXzNr9xz1Xw6Jq1cuIeBHKlMhP88DARW2KuM:z2EoXg1C6ZrHz1Xw6A1culBUXcx2K5","tlshash":"2c8302bf5d95825bd841d76721cc34e9cf3a22324588b4ceb87d0bbb3b32845a5642ad","first_seen":"2026-07-27T03:54:22.623097Z","last_seen":"2026-09-27T19:12:39.038502Z","times_seen":5,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":292,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_60817374-eab3-4d16-86bb-4cd32b8f4f9c/BBPlus-Banner-Desktop.svg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.635Z","timestamp":1790536298635,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_60817374-eab3-4d16-86bb-4cd32b8f4f9c/BBPlus-Banner-Desktop.svg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 06 Jun 2022 13:31:30 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1626827,"size_decoded":1204081,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab089c451986154cb6b73ff7f5dedc0b","sha1":"fa63963ef9d17938875c33ad2ba05b82d834aabc","sha256":"e6bae2a35505a03db5532b817bb3c0ab44715153305470cb37a356741f2e7964","sha512":"5a90034709a9c7f6181d11cb0134b1eed3a6da09a49dfe1fce9a7513d1f3234650469ea0e7c136d96c531fe30be891b175b860cc8289bbd3f62285224c2b46f9","ssdeep":"24576:M5tOali8NKj4wfB4QKthK0/4cThOy0V5tOali8Nl:+CWFBCV","tlshash":"762512335bab3f215467151cfefa676f1b38a1c4914a83ac4ad7b897b499db1cd02023","first_seen":"2026-07-27T03:54:22.62402Z","last_seen":"2026-09-27T19:12:39.057661Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":183,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/css/site__bba_print--3c21fbe364306dd1519939dd02bcf3e0.css","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.674Z","timestamp":1790536298674,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/css/site__bba_print--3c21fbe364306dd1519939dd02bcf3e0.css HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":913,"size_decoded":604,"mime_type":"text/css","magic":"ASCII text, with very long lines (831)","md5":"bb27e8fbce3da68b256b3363b842976f","sha1":"be862e2883e0db07276282a298caba348c562193","sha256":"26bde7bd3d0f7f4ac9c96a8bd8f6b621b7ff8de393f331fc3a54a88ebdc9aa02","sha512":"d8661331a5a871c00bbdf798555e86824e9f9f77a4028e8f713309ff67b1422f60441d1b7ab266c0d1a213bf6069c6b8c4fa4f483b776e545c813c7833dd0f3d","ssdeep":"","tlshash":"811134177740a39404238e337eefe356203019692a224ff8dd32fa2d0f7b0252a6281b","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.059207Z","times_seen":6,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":657,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_c77b1a52-4557-42e6-8cf3-07fd1d9f49c4/BBAU5140_HL_Header_1600x460_1.jpg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.672Z","timestamp":1790536298672,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_c77b1a52-4557-42e6-8cf3-07fd1d9f49c4/BBAU5140_HL_Header_1600x460_1.jpg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 417364\r\nConnection: keep-alive\r\nLast-Modified: Fri, 25 Feb 2022 12:35:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":417364,"size_decoded":417577,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.1 (Macintosh), datetime=2022:02:24 09:11:56], baseline, precision 8, 1600x460, components 3","md5":"8fcf5d7f9d40a88fe38f70fadf38a063","sha1":"3a99fea93e99efa4dac0b156c2b85b21c9f7a1c8","sha256":"3817fd6008b659f795182bc742f5aa614713daabbf82c6f22a5d9a6b83cfcd5b","sha512":"5c4194bfe7f9ce55c4bda6fb36d3e8a00139e45bc9bea5d95771ac0224e020b9b305555b24d73b88e2fed49ba1ca51cae4cff37a2d3c66c67944e9d12232811a","ssdeep":"6144:yqE1Oi9co17/SmimH5X5ZRVxKr0Wt2d8iAdNip6NSYlz+jk6vVKUCtZAyAnG:yXRLimZJfVxK4d8VdkosdhKHtZAdnG","tlshash":"0594233575188f40f6c40ab8d6fbc6b127721fcd499be106bacefe037b5c258a945602","first_seen":"2026-07-27T03:54:22.625181Z","last_seen":"2026-09-27T19:12:39.060744Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1209,"timings":{"blocked":685,"dns":0,"connect":0,"send":0,"wait":179,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:40.235Z","timestamp":1790536300235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Sep 2026 20:24:42 GMT\r\nexpires: Thu, 23 Sep 2027 20:24:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 341218\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":2271,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-09-29T15:02:35.402648Z","times_seen":37912,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/images__bba/linkedin-icon--8f4997c22773c626578505ac8034d1f6.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.119Z","timestamp":1790536298119,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/images__bba/linkedin-icon--8f4997c22773c626578505ac8034d1f6.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 510\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510,"size_decoded":719,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"8f4997c22773c626578505ac8034d1f6","sha1":"2cbb62357de2a7685db172c73504798644a6a429","sha256":"e965e535fc03982f10bd584cf3f909cda54ae05601f1de2e46854282df9b7669","sha512":"f3596328509e9edc99fccaa90cf8c19d4a383e582b74bbcc679cf32a3a34caa2a4455fa0aeae2d0f87afea6dfb95cb3fbeeddb62a144f61c4e00fcb3b290e5d7","ssdeep":"","tlshash":"9ef005d367c154b8d599173dc02f6521e147f9442173c3101337aa24af3552846d1baa","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.064919Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":1540,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_09cbabbc-20ae-4997-9cc8-55ee3318ee04/personal-insurance-campaign_M.jpg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.629Z","timestamp":1790536298629,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_09cbabbc-20ae-4997-9cc8-55ee3318ee04/personal-insurance-campaign_M.jpg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 339028\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 Apr 2022 10:47:10 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":339028,"size_decoded":339241,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2146, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=3167], baseline, precision 8, 760x515, components 3","md5":"8594e4ce79c0cefdbf67d74232755e76","sha1":"8189f5a79a5dc545cbf965ab43031998de3b3b92","sha256":"65bbeefb5b1aa209ab9c54fc28ef813da3b496ea2b6fc29d8b0252ba80faac90","sha512":"3e7673a5b39713160e7cf78fa5b9342db76099e523cb7ce6a0451e8cb494464645c8fc700eb97104a0743037f141096ba21f6dd16a97ee40fe7888527afa89dd","ssdeep":"6144:oZkZm1Z5P/G84bCheC09DAbswyclAg58jIA/Ht+CCkKUm6H59e/4XD8wGOMW:oa814ieCkUEclAyOTPgCNbZ9eqDIOMW","tlshash":"997423259ad38e62facb82ff8de36604630b7b59117772277b0f85807768b54b32055c","first_seen":"2026-07-27T03:54:22.635526Z","last_seen":"2026-09-27T19:12:39.066983Z","times_seen":5,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":295,"receive":381,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CoaqmBWZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.291Z","timestamp":1790536299291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CoaqmBWZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allcitizensholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-8d76\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k9fjhOkneXGoxzhMVvtjPfvdymd2Al62DJ0OwMyrBVZmiTRQ8ZSxVBRTqmSfgiijYv45+CU\r\nx-77-nzt-ray: e2f75420be7fec12906ab96a9a209a11\r\nage: 1074723\r\nx-77-cache: HIT\r\nx-77-age: 1074691\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36214,"size_decoded":8228,"mime_type":"text/css","magic":"ASCII text, with very long lines (36201)","md5":"d67581c9b3003d85736b4a54c38a6f38","sha1":"0ada53753b0d87201b854a692e2bafd682b99811","sha256":"f849d090665d31e2c158996956b91a47ca60d0beb614a0ee17b25d3172636a86","sha512":"f7d871280eac56430f11bdeea780dd2d1681bea7347a9ef71f8977455147ac51a86ab59e2d5b9379677debd38ea37f726fd75207f250eeb57cd3013e70710c3f","ssdeep":"384:F8fY2l09kg7Tc6/WYtGLadKzSVX8Kj6+iZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM09kgTcCWYtG4XicrNSN56DwQ43","tlshash":"06f2966daad9093dac23c179e3f8e58c911af5e5df3226daf74239008ac17ff0986514","first_seen":"2026-09-15T08:49:00.636328Z","last_seen":"2026-09-29T06:05:19.040445Z","times_seen":285,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/s/files/1/0070/3666/5911/files/Vector.png?574","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.297Z","timestamp":1790536299297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /s/files/1/0070/3666/5911/files/Vector.png?574 HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 303\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Tue, 11 Aug 2026 20:17:20 GMT\r\nage: 4146926\r\nlink: \u003chttps://cdn.shopify.com/s/files/1/0070/3666/5911/files/Vector.png\u003e; rel=\"canonical\"\r\nserver-timing: imagery;dur=226.785, imageryFetch;dur=173.843, imageryProcess;dur=21.435;desc=\"image\"\r\nsource-length: 255\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6OE1lwNCzIZpQbX5JLRvyabt%2FBGtHrU%2FvoO0Z09NHpTF9gF9JQzDihQuhbLiAtuIBnB%2BWYNyWKVZIx1dgiJe5kVA%2F82A4s1CcAVRwSyax8nMBiQgGVXhwYUIzjeLH7t5g%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: ef58ecdc-beec-458d-9c63-8d1c54e29c81-1786389372\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: a41cd0bebf427127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303,"size_decoded":1551,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"7027ffb860077e87a09c1572b4ba3b13","sha1":"d3e5499ea93ef29dcb43a6c3fc31fb660da61b13","sha256":"7178470d09904b63d798540aac5447de6a466c67f3372ab9c323c39aad343915","sha512":"64c56d37c01e0bb6b83920e1f441618a425e5366767f597c144e639b449eb92128fde46238266899f361c7a24a1f97197f3ee20a8ee5c297bf929ffa28f63d04","ssdeep":"","tlshash":"5fe072e78b21cdbec04e4cb82a22021cf8632f856a16280ba845382d2d086c2b61ce43","first_seen":"2024-05-09T18:36:31Z","last_seen":"2026-09-27T19:12:39.069662Z","times_seen":604,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":31,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/utility--e9663b1a149ed7325415d903af7a04cd.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.905Z","timestamp":1790536297905,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/concat/utility--e9663b1a149ed7325415d903af7a04cd.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8545,"size_decoded":2888,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8545), with no line terminators","md5":"e9663b1a149ed7325415d903af7a04cd","sha1":"72baeed9ddb084eec2c7ab4a7204f5e8ea211500","sha256":"4a7796925abc70b6c10466e5692eddbe3a943908413f89a3ee62eadaed34c902","sha512":"55cd191c65fee05d4fdfb76bff3b1a7efe5cfee71e3307622881a4f2646aefdf0bdab48f9aaa59fd2661ed4ab82f7424dc1683d0f0010109bf4a57e0fd6135e5","ssdeep":"192:Fwv5QkXcfgLxLYz07eeE3b/1GLNhiWOOcAYy:FwitQYz07eeE3b/1GLy9OJ","tlshash":"3802416c315f60f65de762ab70df930e6932749c646888a0bd0198d82f7db870113ebe","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.070368Z","times_seen":6,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":173,"send":0,"wait":189,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_505ea5ae-8cfb-416b-a489-fcbb6d14c07a/4426_BBAus-Main-Header-3.jpg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.634Z","timestamp":1790536298634,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_505ea5ae-8cfb-416b-a489-fcbb6d14c07a/4426_BBAus-Main-Header-3.jpg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 189307\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 Apr 2022 10:47:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189307,"size_decoded":189520,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x460, components 3","md5":"3b890e470c84c2b805e854f43fe16e16","sha1":"f4edc57f743f43e37b86b9e57395eb0494649136","sha256":"b91b6ef83d149ec3843462c1423dbc82f711e6f5c10dad6363d3b0b8b273a4c2","sha512":"82853a78799e8b776352d938c220dfed9fc741adfcb82bdc03379e615ad1473838cde5a860689ad2200b16c82c37243751e28944a915db68052945b91dea6b79","ssdeep":"3072:mdMI22vG0JyhNKn8yaPlc9IV8w83C2tg1Z8+5lynA4uBjofNCxgWOde4tdylN4:md5VGEyhNK8nP6+r6q8+5kOBcfNC/ies","tlshash":"1a04226f6c8e690de2064bf309f98cfacad6c25c9b4ec257057a798900e3adb407d457","first_seen":"2024-09-19T20:56:52.089407Z","last_seen":"2026-09-27T19:12:39.071502Z","times_seen":9,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":454,"dns":0,"connect":0,"send":0,"wait":174,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.clare.ai/wati/images/WATI_logo_square_2.png","fqdn":"cdn.clare.ai","domain":"clare.ai","tld":"ai"},"ip":{"addr":"104.20.41.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.295Z","timestamp":1790536299295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clare.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 00:12:37 GMT","end":"Wed, 18 Nov 2026 01:12:32 GMT"},"fingerprint":{"sha1":"A5:50:14:6F:45:F5:1D:44:EE:72:3E:58:BC:44:AB:5A:89:28:B5:75","sha256":"90:1B:73:48:5B:ED:3B:DC:3D:DA:51:3A:48:C4:96:7E:3F:90:2F:F5:2A:25:1B:EE:29:73:B9:92:4B:BC:A9:7D"}}},"request":{"raw":"GET /wati/images/WATI_logo_square_2.png HTTP/1.1\r\nHost: cdn.clare.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 32611\r\nx-guploader-uploadid: AJ5rDhH71J3IzayFgC9uchFnGEPC29uElFDsnm4ZhUpuLNh3PpBqYmrSVS4hkf5J9wgOkvKyUkiulJo\r\nx-goog-generation: 1691142069515975\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 32611\r\nx-goog-hash: crc32c=RjRZ8Q==, md5=ONTj9mTfCpdsMEIeJ1s2Lw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nexpires: Sun, 27 Sep 2026 20:10:45 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 04 Aug 2023 09:41:09 GMT\r\netag: \"38d4e3f664df0a976c30421e275b362f\"\r\nage: 54\r\ncf-cache-status: HIT\r\ncf-ray: a41cd0beac402678-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":32611,"size_decoded":33375,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"38d4e3f664df0a976c30421e275b362f","sha1":"34cb0980a29f1d72af3d96399d795bc9a0d74e5d","sha256":"cf7a43a5284671b26248d937cea2319282059fdce0ee1a14d2b13f611be98f92","sha512":"1309e165d5cf586e59c95fb93388541855d818b4e57ad7c5a7706cd9d8ef3c28db67be36ea27f5ed9cbfc18bc712a18f726c2f6a2e8d019446f0887b3ee42c6d","ssdeep":"768:jtr/JDX7Hizn3xfHJJxhmboJdzDu72OBGYctO:v4nZH7xhHJQ29Ycc","tlshash":"21e2e816ca1125afa1661040b7db38d2d9714c937168ef4f5f82a23a8ac7bf0fd31e95","first_seen":"2023-08-12T15:42:11Z","last_seen":"2026-09-27T19:12:39.072819Z","times_seen":327,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.185.17.182","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.481Z","timestamp":1790536299481,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://allcitizensholdings.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yFZibWVnZ2AoHQBw77RlJw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: +Pqo0J29I5hICt+u2+6EkIN2syE=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T15:35:27.120197Z","times_seen":18724884,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":73,"connect":90,"send":0,"wait":22,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/fonts/ProximaNovaA-Regular.woff","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.648Z","timestamp":1790536298648,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/fonts/ProximaNovaA-Regular.woff HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/css/site__bba--3cf347e8ff02f71b684e147f79913862.css\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: font/woff\r\nContent-Length: 14752\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14752,"size_decoded":14963,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 14752, version 0.0","md5":"710b9971af812650a277ed7e45b37e49","sha1":"b1ceb5baf280c7553ab7219da6d2da96fa8ad83a","sha256":"cfa2207df253dc37d7a090c3e0a4daa2e7f588b814890dda666fa34452b831bc","sha512":"a786fca914b352b515e63b31f3b8fa8282d6650bfbef2bf9b728f94d945a1b5169b77c1d850a4ffd410279fe10716107f525e3322cc4bdf1b7b0c0998aceefff","ssdeep":"384:nyYz71W1LKnS2zE2GduG4cb4B/zN48y6lNe:nyYzxQzF2/24B/he","tlshash":"1962c0fffdf3b972f066e9b135d991a067988280d40b5cafeca50aca05c71c0859c1e9","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.073917Z","times_seen":7,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_942a14ba-4402-4bb5-9106-cb9f945188dd/BBAU5202_Allianz_FullBlock_760x450.jpg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.630Z","timestamp":1790536298630,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_942a14ba-4402-4bb5-9106-cb9f945188dd/BBAU5202_Allianz_FullBlock_760x450.jpg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 259679\r\nConnection: keep-alive\r\nLast-Modified: Tue, 01 Nov 2022 15:03:40 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259679,"size_decoded":259892,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 760x450, components 3","md5":"bf8a48330b46c370ee2e83ce79ddafbd","sha1":"d298f3d616b531a0995723cb3a65a5eb5823a7db","sha256":"fb1be5d3fd825636ee0e82202def4e6987a5c2627020894a4b5891e5cdf987ba","sha512":"58ebdae43c4cbd7f9631bf5690ec1241b2865211d57a43dc87d0d554b0da47d4db66e27ad0ce75ef4af4f6d968258fb478c3b87d9207a3c5a72339bd3f96624b","ssdeep":"6144:2Wb+4gLXvEq5PSqPZo0A9h+k7G/0d/m5K7gMa0Xen6bLeJ:2Wb4L80Py37G/0NYK7gMa0duJ","tlshash":"4b44234c1b19b6d8fecc6e26f14a5dce04833f66a39c47313a5ea26fb684b5c270149d","first_seen":"2026-07-27T03:54:22.619607Z","last_seen":"2026-09-27T19:12:39.075004Z","times_seen":5,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":292,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.194Z","timestamp":1790536299194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://allcitizensholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6ab4ecd1-891\"\r\nexpires: Thu, 24 Sep 2026 09:33:15 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: kz5ga344SaFi6ykMOW/7pomvm+GoAF+RpcNMG/u0oYh9OHzg404vAuIX899CCIblNOPxL6w\r\nx-77-nzt-ray: e2f75420be7fec12906ab96a490d020f\r\nage: 1\r\nx-77-cache: HIT\r\nx-77-age: 2257\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1039,"mime_type":"application/json","magic":"JSON text data","md5":"12c6716ff3ab953322bacd460252db22","sha1":"15813d602fcf091b0ac305e50a8497debbf87c96","sha256":"e9445ab5e907bf30755143459b61f7f8d7f12d9b8ab3fdc0148ba9ca47556c1f","sha512":"f7b1e9ab71475a9559e324afcdb5f262b3e2d20ca2cb171a9e1a1750461f7c0c24c376b7714ce7d936c5dcb5f41ed789398ab5503e1754435c3c3cfbfd11b5ca","ssdeep":"","tlshash":"75411693c0f80d431b8c652bb89589415d9083c7acc93d1d366d9a7f2f4ceaa10e67bd","first_seen":"2026-09-24T09:31:55.04595Z","last_seen":"2026-09-29T06:05:19.161163Z","times_seen":83,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":31,"connect":8,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260923","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:40.234Z","timestamp":1790536300234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:01 GMT","end":"Thu, 03 Dec 2026 19:22:00 GMT"},"fingerprint":{"sha1":"CD:07:3B:50:75:01:24:0F:C7:C7:3C:64:23:AB:79:7D:38:72:95:D1","sha256":"67:AA:6A:7F:90:26:22:7B:D8:F2:CD:2D:6B:33:8A:1A:63:D8:27:4C:52:08:D6:BA:7B:38:CC:54:84:C7:82:7C"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260923 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 27 Sep 2026 19:11:40 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: script-src 'nonce-1PpPQQh0Vyv1oHibx4ejaQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw0pBiEOLheHPl6VU2gYYtj-YwKikl5RfGlxQl5hXnJJakFqcWlaUWxRsZGJkZWBoZ6xkYxxcYAAAxtBMf\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=CoICCAIStAEBAQxeRR8lIVK6UunvAG7Xubbf7QKuYsezwLXPicY6IIkL0vA5uz1vRVXius2vjhjGs6b1ZvwMMXwx2g8ydLx2HdvCeMQR4PL_EhEBkkR-E9_x9rFjnWgVC-SesflAjQQz5COY0bBE-IhQ5tz36yBWj_VcvyjwWMA6_v5DPiI3yP8sPQOhBxVFwmetHn3K3YqDoMKXC5HfUTSLqHiwSCisn7uiGkLRnhCL1TNupcIDqRw0e3soAjJFAX1sxKpqpdjpd7a-ZhK-dGCd47BSf4cWrTlP-rM1noXvEib1P8LT96p1cEKO4VURNEG-5wtqhRtHjPBiE8jMW2zePC4D; expires=Thu, 28-Oct-2027 11:29:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-ENID","value":"CoICCAIStAEBAQxeRR8lIVK6UunvAG7Xubbf7QKuYsezwLXPicY6IIkL0vA5uz1vRVXius2vjhjGs6b1ZvwMMXwx2g8ydLx2HdvCeMQR4PL_EhEBkkR-E9_x9rFjnWgVC-SesflAjQQz5COY0bBE-IhQ5tz36yBWj_VcvyjwWMA6_v5DPiI3yP8sPQOhBxVFwmetHn3K3YqDoMKXC5HfUTSLqHiwSCisn7uiGkLRnhCL1TNupcIDqRw0e3soAjJFAX1sxKpqpdjpd7a-ZhK-dGCd47BSf4cWrTlP-rM1noXvEib1P8LT96p1cEKO4VURNEG-5wtqhRtHjPBiE8jMW2zePC4D","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-28T11:29:58Z","raw_expires":"Thu, 28-Oct-2027 11:29:58 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=CoICCAIStAEBAQxeRR8lIVK6UunvAG7Xubbf7QKuYsezwLXPicY6IIkL0vA5uz1vRVXius2vjhjGs6b1ZvwMMXwx2g8ydLx2HdvCeMQR4PL_EhEBkkR-E9_x9rFjnWgVC-SesflAjQQz5COY0bBE-IhQ5tz36yBWj_VcvyjwWMA6_v5DPiI3yP8sPQOhBxVFwmetHn3K3YqDoMKXC5HfUTSLqHiwSCisn7uiGkLRnhCL1TNupcIDqRw0e3soAjJFAX1sxKpqpdjpd7a-ZhK-dGCd47BSf4cWrTlP-rM1noXvEib1P8LT96p1cEKO4VURNEG-5wtqhRtHjPBiE8jMW2zePC4D; expires=Thu, 28-Oct-2027 11:29:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T15:35:27.120197Z","times_seen":18724884,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:40.236Z","timestamp":1790536300236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:21:53 GMT","end":"Thu, 03 Dec 2026 19:21:52 GMT"},"fingerprint":{"sha1":"4B:5D:D4:D0:79:EB:14:47:27:3D:6E:FC:90:2A:C9:E3:C2:11:E4:2B","sha256":"FB:C1:41:B6:11:F1:50:E5:B4:AC:09:1C:7C:4D:28:48:AE:90:06:51:C9:8B:57:A3:5E:14:EC:A8:7C:30:F4:19"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Sun, 27 Sep 2026 19:11:40 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":717,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-09-29T15:02:35.398971Z","times_seen":102459,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":3,"connect":25,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_8ac7828b-7eab-44e2-b934-c7543d844935/BBAU5119_Mobile_760x515_Emma.jpg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.632Z","timestamp":1790536298632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_8ac7828b-7eab-44e2-b934-c7543d844935/BBAU5119_Mobile_760x515_Emma.jpg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 309812\r\nConnection: keep-alive\r\nLast-Modified: Wed, 23 Feb 2022 12:43:44 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":309812,"size_decoded":310025,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 760x515, components 3","md5":"24075e1017e3a2999007c5b8e27d6b08","sha1":"ed378f89ebbea83793ed37ff404400b78d2a2e75","sha256":"6a1affa2259cf891ba0fbc8981b97c6af003d8561d08a0ee1e0ef627ab3b1d42","sha512":"1f1638971c0257c49a6c3f7b20e6b9c8330be885c2e6a7ce82aa8a6635f76280f0c6a46b7d4a1938488686fdad82f74e39cad8674b054c7fc870063653b78d2a","ssdeep":"6144:XXEUpFd9hQcW7aioFeBFsC2IbAcOxUxAkT76CUtu:EIFd9hQcm8RC2qu+rT2CX","tlshash":"ab6423b01917e17ae2d2835993549a993cb6cefb0fa205ddc155d3a898c47bc1a2fc34","first_seen":"2026-07-27T03:54:22.609036Z","last_seen":"2026-09-27T19:12:39.077066Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":454,"dns":0,"connect":0,"send":0,"wait":176,"receive":507,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_0b0dfdbe-4c1b-4bd7-8642-c984973f2b14/dot-4.svg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.113Z","timestamp":1790536298113,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_0b0dfdbe-4c1b-4bd7-8642-c984973f2b14/dot-4.svg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 02 Nov 2017 15:19:10 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":814,"size_decoded":760,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53e31a10dd506da260c426b9da713fc8","sha1":"dd2d04afaac6a31d81ba9e1abb09d91aba94d24a","sha256":"8a2baa9413eaa4228b0b00f95a967e0c31fa79ddb42a14977682d2c6db82ec65","sha512":"75697d980a4d172cb16329bed81034523ff21116f116f4b1700a99e209817a27c498bf49677a333af5b9aa921e704c966768d4fee30df0212c33fea8f4016c21","ssdeep":"","tlshash":"0501465a436a1878dc1716acd3d0364364fcb81653bee7dcdb82377ba0248f61498ea6","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.079122Z","times_seen":6,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:40.115Z","timestamp":1790536300115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:31 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 530349\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-09-29T15:02:35.379557Z","times_seen":98738,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":3,"connect":41,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:40.237Z","timestamp":1790536300237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Sep 2026 21:40:11 GMT\r\nexpires: Sat, 25 Sep 2027 21:40:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163889\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":1361,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-09-29T15:02:35.360757Z","times_seen":37473,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.833Z","timestamp":1790536298833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BACAAQ/d=0/rs=AN8SPfoA7KrA4pcktB_ZCt-cgXnIUlRzPA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 18:41:00 GMT\r\nexpires: Tue, 21 Sep 2027 18:41:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 520238\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-09-29T15:02:35.37196Z","times_seen":39213,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/js/site__bba_theme--c2eb002ea32b9e271af0.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.910Z","timestamp":1790536297910,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/js/site__bba_theme--c2eb002ea32b9e271af0.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58199,"size_decoded":9864,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (58133)","md5":"945f0a1c799c824a3eff5776c046ae5d","sha1":"1b06c4b5cd7e9f36c567e96252846c7ef034d1a7","sha256":"50f9f36e370e609b7fb1207bf0d816ec0842f03bfe55c849ab4d410a368f6969","sha512":"a6daf993cf5b46113a23ea7e9995f5fe884e508d579ed33b737bcd6787b9131a20f11fb8864bb84940ea6d04f3aaa958e51cf65bc31696ab847cf1324f47663e","ssdeep":"1536:I6zYBWCXLjTw4elaw0v3r2dfHrf025K3N2DeE3tnDi6UPL:XeMfvq5D","tlshash":"fc43b574b274a27743c3f186f06b764975f366a58482a404703ec9ce9dd8d8e22eda3d","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.08162Z","times_seen":6,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":327,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_0e25d0b6-2148-4bf6-a64d-9210236ef44e/dot-3.svg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.112Z","timestamp":1790536298112,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_0e25d0b6-2148-4bf6-a64d-9210236ef44e/dot-3.svg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 02 Nov 2017 15:19:10 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":796,"size_decoded":747,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"deecbfe1df334bdff614cb044c4a57b7","sha1":"805565d0f274815966a0b839d7e238b1dcfa17dd","sha256":"e2ea7733a4eb9711d0e4cfbb567b705776f18551e9f2728e5221cc00c29709c7","sha512":"9d69a3a2dbc035cffa6b6a678addfbf1fcbdff331ec460b1a904c418b3e9459ac97a2aaaa21d87f0de75877ccf7f425f3300cda0b2304ad92de70305998c292c","ssdeep":"","tlshash":"c001756a82e3f9f2604e0f64d9b5314230b0f4d3d66cd0eceba0745bb010c628560f5b","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.083348Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1654,"timings":{"blocked":1479,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:50.205Z","timestamp":1790536310205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://allcitizensholdings.com/\r\nOrigin: https://allcitizensholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://allcitizensholdings.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 27 Sep 2026 19:11:50 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":531,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T15:35:27.120197Z","times_seen":18724884,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/js/iziToast.min.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.103Z","timestamp":1790536298103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/js/iziToast.min.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 28 Feb 2024 10:57:56 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18481,"size_decoded":5342,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-09-29T00:38:36.663099Z","times_seen":3640,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":473,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/public/uploads/admin/logo-dark.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.107Z","timestamp":1790536298107,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /public/uploads/admin/logo-dark.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 86206\r\nConnection: keep-alive\r\nLast-Modified: Wed, 05 Aug 2026 19:30:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86206,"size_decoded":86417,"mime_type":"image/png","magic":"PNG image data, 1156 x 216, 8-bit/color RGBA, non-interlaced","md5":"981e499fc8bdfedfe97992a74948f7fa","sha1":"308d241b1525625584a6dd396e713e58f08b64e2","sha256":"9ff59b1b61433aa123fcfea94933713e9f79fb851ae1c495324853ba865ee90a","sha512":"8520f0e5f34cb0edb2d6cbccb1a64feeaf30e0b856c5d9f60f721c1688c7e0b96d22b616046831aa3121ef33438ceb5ee5987d931ad053789f310cd6cfe3dc0c","ssdeep":"1536:dhb4Zz6cbofYkxAMysl7uzy+LAhAaWUpEAim8/S3KfT0VtEYw18djvr:jk9uxCsl6mnNqD7UEYw18djz","tlshash":"3183f1028505213297af49a71f71436086f7194cb3a536b837daa677f891332bde6fc4","first_seen":"2026-09-27T19:12:39.086139Z","last_seen":"2026-09-27T19:12:39.086139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":650,"dns":0,"connect":0,"send":0,"wait":313,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/jquery--f7776a013988da5365d98666c6294d4c.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.903Z","timestamp":1790536297903,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/concat/jquery--f7776a013988da5365d98666c6294d4c.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135604,"size_decoded":44228,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f7776a013988da5365d98666c6294d4c","sha1":"844c9dec57a113b5875bb882de27f97484eab21a","sha256":"ebd4de5e91181855c9a05d7ba3273f8767d040ce575a54ccfa1ec76b206a72c8","sha512":"90ed1a05e000353980f3512a11ba98ad4e6cc2a3e131393f2e710b18fb599bc25fc2e8d616d8447cb1acd0f0b43c8cc41386c3f120cc902d0bfb9d92b967082d","ssdeep":"1536:YbWKXsLGzgtAmouqbxS9BT6F5nYEw5puTME53q8u5E4R6zJBgEAMwoXkmpEPTV0Y:UJRTMEQLR6kPMwoU7hxYp+0x5ZWiV67","tlshash":"03d328cd76c6b0624ba730f940afa10bf17619a8a40e8414f0a4d4e6bcb9f895177f7d","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.087542Z","times_seen":6,"resource_available":true,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":171,"send":0,"wait":345,"receive":170,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/foundation--b896ce0499cb3de8725490040cef4c66.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.908Z","timestamp":1790536297908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/concat/foundation--b896ce0499cb3de8725490040cef4c66.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38966,"size_decoded":11132,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (38966), with no line terminators","md5":"b896ce0499cb3de8725490040cef4c66","sha1":"ebe0966c60a311d7f9e052d758c4345e06728b01","sha256":"cc92f091877cadeacd892475d0a27b8398db3b985a3692b530f555fcd3c444a7","sha512":"a7c759f2a387e979b7053b9a5d17eff76ce4b56cd98844784e810c23fd4645320fde61e9a513cdfdde747064fd29301d69c793b0e2db3fef4c8723508264e51c","ssdeep":"768:vdEhUu6z+brKUnTJFw4fIUlA+s43ag0FfYUWJrQdXjkskqrVWR7P2H:/UTF3puFfYT4XYRqrYR7P+","tlshash":"f903c54df15170b911ff65b2012f2105a1336879a82a94b4b97dc6f85eb8ecc2263fbd","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.088773Z","times_seen":6,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.099Z","timestamp":1790536298099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:01 GMT","end":"Thu, 03 Dec 2026 19:22:00 GMT"},"fingerprint":{"sha1":"CD:07:3B:50:75:01:24:0F:C7:C7:3C:64:23:AB:79:7D:38:72:95:D1","sha256":"67:AA:6A:7F:90:26:22:7B:D8:F2:CD:2D:6B:33:8A:1A:63:D8:27:4C:52:08:D6:BA:7B:38:CC:54:84:C7:82:7C"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 27 Sep 2026 19:11:38 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2990,"size_decoded":1579,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"9ec4f6720938cbac92f930f679d41b4e","sha1":"227633838f5e04c2a6609968f1c17d6c417fcd18","sha256":"de163892ca82ab5ad38da9bee5d197827a7ce8c20025d313284f5ba0325c0c26","sha512":"70d3fb896329d7b17151ae6b36a575bfe5da1e149f999bcea7deff7729c76d734d47a4e456431a2ab1a773f92ad83310a4a3fe3449ba0b677ee0c2bd1ed7f291","ssdeep":"","tlshash":"9c51029a89b6d0dac4436c2dcfaf927931444037a811dce1bedcd906ffb050ab64d9d4","first_seen":"2026-09-27T19:12:39.089934Z","last_seen":"2026-09-27T19:59:30.542922Z","times_seen":12,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":48,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/fonts/ProximaNovaA-Bold.woff","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.647Z","timestamp":1790536298647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/fonts/ProximaNovaA-Bold.woff HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/css/site__bba--3cf347e8ff02f71b684e147f79913862.css\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: font/woff\r\nContent-Length: 14612\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14612,"size_decoded":14823,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 14612, version 1.0","md5":"9f071be10a3cbc359544327baea31980","sha1":"7e674ce36584c397444abdb66b457c30db0012db","sha256":"6c4a1a94c38f4eb4582bd61b8ba31bb91e96d08a78899529d55026ba66ef8176","sha512":"e992ec75e51b67d408c3cb39df83d61cd89d19623855f747d05fdf8f9aa53a98ebc88db64127fa128220db2ff84fd8df6ff50a2740668c1e73506a467c08f43f","ssdeep":"192:l0qiBrXUPfEEbqYpCJBqyFtI5rF3QaZlbqQvnMd3V5Lz3bo6YCnXvMvieuXfctvw:uqcrMfmkABftI5rCtWw3EbHJ5tfBO","tlshash":"7362d0502f740bb8e6aa3d3d835b45608b7db369d48685fbb0cc09d4c41d1a79b280e9","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.090984Z","times_seen":6,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.840Z","timestamp":1790536298840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:38 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa92cf9-4668\"\r\nexpires: Tue, 15 Sep 2026 11:39:16 GMT\r\nlast-modified: Tue, 15 Sep 2026 11:33:13 GMT\r\nx-77-nzt: kxJ4sE46w5j9IPfzJ+kEUyQ4cpiEUTVmL5hxGxBCCZ79gLAnBmFCz3u3bL89moiC+U/hBaE\r\nx-77-nzt-ray: e2f75420b1ba11078f6ab96a83626134\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 1499\r\nserver: CDN77-Turbo\r\nage: 35\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6053,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-29T06:05:19.109891Z","times_seen":9682,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":6,"connect":7,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Ci3sulf9.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.288Z","timestamp":1790536299288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-Ci3sulf9.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://allcitizensholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 27 Sep 2026 19:11:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ab4ecd1-3e9c\"\r\nexpires: Fri, 24 Sep 2027 09:27:50 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: k9d/MMKDW/JFpmhcDOr5R6w7KNnmEvNRJlSixAfuBJG+htYZoxaHFHY2eAUf/vmg4zB8l+c\r\nx-77-nzt-ray: e2f75420be7fec12906ab96a31657111\r\nage: 294229\r\nx-77-cache: HIT\r\nx-77-age: 294190\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6767,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"2eba624c042df6b9ab614a422c182dc2","sha1":"c66297b197c51aa94b92a9066905bfa42e2e4c8e","sha256":"42d5bb3c366ad7621e46bc942f3009ee1ea1452c905fbbdf4f1d5c3f3220d09f","sha512":"3ab1e42fcdcbe0766b7f5eb07cb796550733ad5fc7dd65ef0657fe4fdb3c73fa94ed5ad19ee8111146f92dffbe72c2c9efb42c5eaa247f449db0050510d21682","ssdeep":"384:FNtFT88tMPdBgaw5O+mvRan7/AKsDoKzwA3Q+crsbUzgfTtQfQIeI+:FNtFX+dBgaw5O+aanrkoKkA3Q+cwbUwx","tlshash":"da72f9741210743f712fac492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-09-24T09:31:55.036956Z","last_seen":"2026-09-29T06:05:19.179389Z","times_seen":83,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/vendor--dff3e0e5be17804c1f3684af41f4c55d.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.906Z","timestamp":1790536297906,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/concat/vendor--dff3e0e5be17804c1f3684af41f4c55d.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74754,"size_decoded":23066,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"dff3e0e5be17804c1f3684af41f4c55d","sha1":"0621ed2eedba67a8b83ff3c55c7c436aae54448d","sha256":"c4e88ad08a741378a1f7c46d0a4785323efdc2cdee4a2ddc5b2c5e61af9e3774","sha512":"55974b684378ea575da2381ec2563ef2ea61ceae51ea88d3fcec6caf912344948fe097aa63f31ea0a8471f3f8e3ecd806ddc1f2448d83e25a54deb53c3170e3b","ssdeep":"1536:VZdR54WyGjy3Q3uZCeI4lJrgrlj6NgcYOasdY3wtr+ZB+GP9uaFK6wJ:h6GGvBacX","tlshash":"8a73f9e4b193b1b25ac651ad703f930bb73a6815504e8420f029d8d53cfce96a1ebe7d","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.09325Z","times_seen":6,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":168,"send":0,"wait":342,"receive":12,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/dam/jcr_7e0836c3-bd41-4d93-8cb8-0aac2e19110c/dot-1.svg","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.108Z","timestamp":1790536298108,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/dam/jcr_7e0836c3-bd41-4d93-8cb8-0aac2e19110c/dot-1.svg HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 02 Nov 2017 15:19:10 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":793,"size_decoded":744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b632a4a4f611d57bc9b03c35c524131","sha1":"47d838b0e840c7f3b218e6c379431fa13081839a","sha256":"dcd57e310b0f577b32d4ba9a3330184a8fce0f4f4ff0c3faecced3f96f3c1b8f","sha512":"fa312cd4b234718ea309ad5dbac0fd006dc2677ec987d22b8e9278943e6aa9e138b20ad790d998dfb69e22557529f41d6cfb75eee0b5a90e7bc90aec784287a1","ssdeep":"","tlshash":"f6011e9486e22af4a04e87b8d1a0720310b9b082a61c44ecd3b1e97b9050cb65420bde","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.094565Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":1345,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/images__bba/B-Corp-Logo-Black--436f42e865a6f5244f4953098e5a6fe1.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.120Z","timestamp":1790536298120,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/images__bba/B-Corp-Logo-Black--436f42e865a6f5244f4953098e5a6fe1.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 2647\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2647,"size_decoded":2857,"mime_type":"image/png","magic":"PNG image data, 60 x 76, 8-bit colormap, non-interlaced","md5":"436f42e865a6f5244f4953098e5a6fe1","sha1":"53b33d38f3744b9352f122f82d3dbed8d26d2c5b","sha256":"4bc9f341d50760d9bbc73c45e7cf12bc34f293fabadd3733357d766a3b42202d","sha512":"757a2f1fdc1c56012c0bd992e1c5002667ee82f037435c79341e2f9431f9e866b5bb90688be48464255fd1f0d0b900ec56d24f2abef3c1c78901179597909e75","ssdeep":"","tlshash":"735119bad77458e6c02db977467998cf8c5154213f67da8164ba88bc184023cf4c4f2f","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.095509Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1822,"timings":{"blocked":1648,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.kcoYp1lJ1O0.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfp2u7eC3LpfxmAWk5uysGKk4ns3_g/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.836Z","timestamp":1790536298836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.kcoYp1lJ1O0.O/am=BACAAQ/d=1/ed=1/rs=AN8SPfp2u7eC3LpfxmAWk5uysGKk4ns3_g/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 101591\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Sep 2026 18:34:27 GMT\r\nexpires: Fri, 24 Sep 2027 18:34:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 23 Sep 2026 01:50:29 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 261433\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":292769,"size_decoded":102452,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"8e46405c8728cc8b34ed3688a1f94ca8","sha1":"3024a68242c0eab18583690f6428892b6cfe8c59","sha256":"c6e12c961b704f83fef6d04325f41562d9f3070052f5cb7a88a3eed83e5e0f84","sha512":"583251746d618f39a0ded45a58b3f89e4b57e768245d351554765e3760c4af9a27c236a4df1de37cf28c8646fb8bf6e67c17d836b6016e364a99bec847d4add7","ssdeep":"3072:yDPitsvKkA7K46ku5LWw9fPJE2+nUclDcK6eun1/ytEX3cRj3g6Gl:cGuFdK+C8naO","tlshash":"5254d7dcb29670a79363f4a5517f044ab13b68a5f8084dacb288d8e26df4d09417bf7c","first_seen":"2026-09-23T19:53:47.923404Z","last_seen":"2026-09-29T02:29:41.936894Z","times_seen":350,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":32,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/public/uploads/admin/L3fVKqVg7bPmIS.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:39.957Z","timestamp":1790536299957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /public/uploads/admin/L3fVKqVg7bPmIS.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:40 GMT\r\nContent-Type: image/png\r\nContent-Length: 26730\r\nConnection: keep-alive\r\nLast-Modified: Wed, 05 Aug 2026 19:16:21 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26730,"size_decoded":26941,"mime_type":"image/png","magic":"PNG image data, 199 x 216, 8-bit/color RGBA, non-interlaced","md5":"545d52d0dc485c5f4192f405459277c5","sha1":"f10f2f8561cb1bd13de8fcdb7195f565a299efb9","sha256":"b612f901bdbc10e9c385b8ae74efff2b0c1f956b6cab6cda5ce3823b13b4acce","sha512":"f5a14386677e81592b5c58ab2710320d83af6205d0a5ba48b31182dac585777a40f25c40aa164bab990f6429de27ffd5819d0e5333b3b53568257ccbf77644b3","ssdeep":"768:RUTRUAWhw0ofTpKIhpYr4Gf4U1jqA9sRj7f+AbSBCvs:RU/WhNofFKkpef4yFqR/2AGME","tlshash":"acc2e1d465bfb5de351cc29a631ab7b410d173c6018eb56e721a3316eb08f9588a143d","first_seen":"2026-09-27T19:12:39.097125Z","last_seen":"2026-09-27T19:12:39.097125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.113.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{6cea2720-ed62-4d5a-b286-a0b557c3ab69}?https://allcitizensholdings.com","date":"2026-09-27T19:11:40.126Z","timestamp":1790536300126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 27 Sep 2026 19:11:40 GMT\r\nserver: ESF\r\ncontent-length: 2635\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=CvsBCAESrQEBOxGDSP8dNBSL_9kloRTb1rxdM-cf8f6NH2Ioyi_fzU8hIVbc3ELgHVVB6sXAIt37_D_uMbhCg458NKmPIAEuBEGPw1POFnL5sn74ZxmsQXsnGRSi954wAlkrRC4RI6nJT-R4yIJLBnDRVIPXgBnRfNRavb4fQaF9DAnmVKWBJHUVI3K3xCq71n4rbb5_fYYl4wAlbBKMiDK0g6QKrXp7_Njc6x3DxnHyi7i9lygBMkUB0qwHz6nWHmO3xNSaC2O3EpxjQO04-6cJP9kAP_8Z9oMlzdWRWxB1I6XkFeVQqoyAMnt6XNn0FmGC3eHUwgOEvVkDWgA; expires=Mon, 29-Mar-2027 19:11:40 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\r\nexpires: Sun, 27 Sep 2026 19:11:40 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"NID","value":"CvsBCAESrQEBOxGDSP8dNBSL_9kloRTb1rxdM-cf8f6NH2Ioyi_fzU8hIVbc3ELgHVVB6sXAIt37_D_uMbhCg458NKmPIAEuBEGPw1POFnL5sn74ZxmsQXsnGRSi954wAlkrRC4RI6nJT-R4yIJLBnDRVIPXgBnRfNRavb4fQaF9DAnmVKWBJHUVI3K3xCq71n4rbb5_fYYl4wAlbBKMiDK0g6QKrXp7_Njc6x3DxnHyi7i9lygBMkUB0qwHz6nWHmO3xNSaC2O3EpxjQO04-6cJP9kAP_8Z9oMlzdWRWxB1I6XkFeVQqoyAMnt6XNn0FmGC3eHUwgOEvVkDWgA","quoted":false,"path":"/","domain":".translate-pa.googleapis.com","expires":"2027-03-29T19:11:40Z","raw_expires":"Mon, 29-Mar-2027 19:11:40 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"NID=CvsBCAESrQEBOxGDSP8dNBSL_9kloRTb1rxdM-cf8f6NH2Ioyi_fzU8hIVbc3ELgHVVB6sXAIt37_D_uMbhCg458NKmPIAEuBEGPw1POFnL5sn74ZxmsQXsnGRSi954wAlkrRC4RI6nJT-R4yIJLBnDRVIPXgBnRfNRavb4fQaF9DAnmVKWBJHUVI3K3xCq71n4rbb5_fYYl4wAlbBKMiDK0g6QKrXp7_Njc6x3DxnHyi7i9lygBMkUB0qwHz6nWHmO3xNSaC2O3EpxjQO04-6cJP9kAP_8Z9oMlzdWRWxB1I6XkFeVQqoyAMnt6XNn0FmGC3eHUwgOEvVkDWgA; expires=Mon, 29-Mar-2027 19:11:40 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31482,"size_decoded":3613,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"91115de97ad1a90076e130223cdd90ad","sha1":"f3ad22e4fa892dfbff0d083bc0465fc3a2240317","sha256":"816e9881b1955d8beff3011d93481dad4c4de71bbd80b50ac267e7e45d4c3bad","sha512":"fbca69c3431240ab374b9ccfb06d76074059cdfe2f153743b292020271a8a3a36885189594a97fd74b43249b1f6359af62dfd0731e7b50e024f37faebdccf620","ssdeep":"192:Z6STcB9aqiD0+52DdKXrWryLxizUSTcB9aqdD0+52DdKXrWryLxG:JTcbaU3KXiMxidTcbah3KXiMxG","tlshash":"d0e267bae8b50d9b6a5e65b416fa2a03306041db4edc3c053b1c1e4c6fdec1e6c7169e","first_seen":"2025-09-02T05:12:23.753308Z","last_seen":"2026-09-29T15:02:35.360158Z","times_seen":29079,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":34,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T19:11:36.531Z","timestamp":1790536296531,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:37 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa; expires=Sun, 27 Sep 2026 23:11:37 GMT; Max-Age=14400; path=/\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"c6232c6d45c4bf15efda05fcaafbf6aa","quoted":false,"path":"/","expires":"2026-09-27T23:11:37Z","raw_expires":"Sun, 27 Sep 2026 23:11:37 GMT","max_age":14400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa; expires=Sun, 27 Sep 2026 23:11:37 GMT; Max-Age=14400; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":118855,"size_decoded":23626,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3316), with CRLF, LF line terminators","md5":"5cd93c2317b44e779f04cb7731e94c6c","sha1":"5641bc4e0884ea33e907c8fddb8a577d16e737d7","sha256":"d7c51f5781f4f9f9d5db6dfd4b8f81072c62fb50bae9ac94d89488bcfec96612","sha512":"57fef138489890d2c16ec39a5017644384bfcc5a59a73806eb40aa91b4e8ac9f8b5fde2eeab0f5be5a72fd31101f7806f15cc83ddfbcd60b81eb8cd33263a7a0","ssdeep":"3072:YJpStrD1KnNzU09444CoZEOsEj3SwaiQM:YKrhKnNzU0V8jCN7M","tlshash":"34c3fa3261d0123946238245eb65b399fff28147f351c484beae53831fbade3c6671a9","first_seen":"2026-09-27T19:12:39.099212Z","last_seen":"2026-09-27T19:12:39.099212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":460,"connect":170,"send":0,"wait":341,"receive":47,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/js/runtime--016daacfa96e66426aff.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.902Z","timestamp":1790536297902,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/js/runtime--016daacfa96e66426aff.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":896,"size_decoded":767,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (838)","md5":"8fc92542295304407d1100a9b7ee95e7","sha1":"7fc5cb964ac7e5336b6e01496a0bfd1b3b58ab20","sha256":"c342afc7ce2b35e35f55f37fe37254ccdaae723892a7d99d758d5e351a7dca05","sha512":"5626c2e112375bc7f3ceae30125900ad79c0206e6347d07f6246f133746c7fa782d51242c00f049d46b64cc9934f3d4400ed9588bd121b937e91feb1a0cdd853","ssdeep":"","tlshash":"9f1180cb3ae0b98253ab78fa093f14d4e739ea610868b144c34494a63c308824099fe5","first_seen":"2023-11-13T18:24:35Z","last_seen":"2026-09-27T19:12:39.1005Z","times_seen":6,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":172,"send":0,"wait":178,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/concat/syndicatecreditunion--b40e64d95aef28c55b2c424e98fff17a.js","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:37.909Z","timestamp":1790536297909,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/concat/syndicatecreditunion--b40e64d95aef28c55b2c424e98fff17a.js HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:38 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46525,"size_decoded":14551,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (46525), with no line terminators","md5":"b40e64d95aef28c55b2c424e98fff17a","sha1":"c3ffc2068641aaf1f02586749500dd0e17001c06","sha256":"44b2ebabe59bac2e6e9c3fb05497dfb7ab594c5f5737e016162be9240b644a3b","sha512":"d9ad28fd44488dd90542f7fa4b8abc7cbbf64a25c6f5feec4a3b7586d4178f7f410338fe58d5fca874a4522f17bb7f096e143fcf164e63358b7428e5c32123b5","ssdeep":"768:2wkk9p8RXA6xrRJg4F8Ksc6n2LEItH5B4Wy3vgM20BrWN73Q:22uhA2Eq8L72FkW6vgM3rWtA","tlshash":"6123f68db150307702e721b6911f520ea2376538740a447cb5b8e9e56cb8d8da3b7fbe","first_seen":"2026-07-27T03:54:22.632457Z","last_seen":"2026-09-27T19:12:39.101363Z","times_seen":5,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allcitizensholdings.com/theme/assets/styles/static/bba001-theme/webresources/images__bba/facebook-icon--272fd77c39fa28d55e0c3a0825091310.png","fqdn":"allcitizensholdings.com","domain":"allcitizensholdings.com","tld":"com"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allcitizensholdings.com/","date":"2026-09-27T19:11:38.118Z","timestamp":1790536298118,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allcitizensholdings.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 13:06:56 GMT","end":"Mon, 02 Nov 2026 13:06:55 GMT"},"fingerprint":{"sha1":"64:AC:16:6D:39:F7:F4:43:BC:99:3D:3F:F0:57:65:43:1C:06:A7:33","sha256":"92:51:CC:38:FB:4E:26:3C:54:2B:37:26:03:4B:18:6D:DE:15:42:E8:72:95:9A:63:16:D4:E9:C2:59:61:16:BD"}}},"request":{"raw":"GET /theme/assets/styles/static/bba001-theme/webresources/images__bba/facebook-icon--272fd77c39fa28d55e0c3a0825091310.png HTTP/1.1\r\nHost: allcitizensholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://allcitizensholdings.com/\r\nCookie: PHPSESSID=c6232c6d45c4bf15efda05fcaafbf6aa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 27 Sep 2026 19:11:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 377\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Oct 2022 13:35:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":377,"size_decoded":586,"mime_type":"image/png","magic":"PNG image data, 32 x 29, 8-bit/color RGBA, non-interlaced","md5":"272fd77c39fa28d55e0c3a0825091310","sha1":"f781994eaf2bd0d4af83dc2a6b703300106e7292","sha256":"2ff05b0d14a6329d63d3aa32e4621d68da2d7af597260f016e2d478d0cd206a4","sha512":"b183dbe714d853a0052b774f666a8f42977d296fa30fe01e5709190c92cb720349ad19d2cef555c2d155bdc255325c7fb22f523ff7ca5a27f2c31d482e08498e","ssdeep":"","tlshash":"f9e0c0db705c03f2e57913c79b5278b0bd722a1cf652c328526dc21222b5e5473e1ba7","first_seen":"2023-11-13T18:24:36Z","last_seen":"2026-09-27T19:12:39.102467Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1689,"timings":{"blocked":1517,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}