{"report_id":"8016ff76-0f24-4b00-a00b-c11c25a4a72b","version":6,"status":"done","tags":[],"date":"2025-10-16T12:23:09Z","url":{"schema":"http","addr":"myeverydaysurge.com/?address1=\u0026address2=\u0026c=15552\u0026campaignid=7\u0026city=\u0026dob=\u0026email=\u0026first_name=\u0026gender=\u0026last_name=\u0026phone=\u0026sid1=462\u0026sid2=\u0026sid3=ff08c61015c7460cb1cc59f7ff2e9bee\u0026sid4=\u0026sid5=\u0026state=\u0026transaction_id=37bc817b2b334b60bfba91fcbb52a162\u0026zip=","fqdn":"myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84#back","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"title":"My Daily Surge"},"submit":{"url":{"schema":"http","addr":"myeverydaysurge.com/?address1=\u0026address2=\u0026c=15552\u0026campaignid=7\u0026city=\u0026dob=\u0026email=\u0026first_name=\u0026gender=\u0026last_name=\u0026phone=\u0026sid1=462\u0026sid2=\u0026sid3=ff08c61015c7460cb1cc59f7ff2e9bee\u0026sid4=\u0026sid5=\u0026state=\u0026transaction_id=37bc817b2b334b60bfba91fcbb52a162\u0026zip=","fqdn":"myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-20T12:23:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"deviceid.trueleadid.com","ip":{"addr":"107.23.95.141","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2010-11-03","domain_rank":89611,"first_seen":"2018-07-10T05:19:41Z","last_seen":"2025-10-14T05:45:33.020485Z","alert_count":0,"request_count":1,"received_data":4897,"sent_data":731,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"d2m2wsoho8qq12.cloudfront.net","ip":{"addr":"54.230.245.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2013-05-25T03:15:49Z","last_seen":"2025-10-14T05:45:32.790167Z","alert_count":0,"request_count":1,"received_data":5048,"sent_data":722,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api-ng.pushy-js.com","ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-12-09","domain_rank":0,"first_seen":"2025-09-12T09:20:31.129141Z","last_seen":"2025-09-28T12:57:14.855673Z","alert_count":0,"request_count":1,"received_data":103229,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"create.leadid.com","ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2010-07-11","domain_rank":77861,"first_seen":"2014-01-22T13:55:11Z","last_seen":"2025-10-13T07:20:38.434653Z","alert_count":0,"request_count":21,"received_data":16862,"sent_data":13288,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":12,"received_data":524084,"sent_data":6585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"16.myeverydaysurge.com","ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2025-09-04","domain_rank":0,"first_seen":"2025-10-16T12:23:10.995476Z","last_seen":"2025-10-16T12:23:10.995476Z","alert_count":0,"request_count":3,"received_data":121183,"sent_data":1961,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"r.lrkt-in.com","ip":{"addr":"104.198.23.205","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2024-08-28","domain_rank":74122,"first_seen":"2024-08-30T06:56:14Z","last_seen":"2025-10-09T17:32:54.86433Z","alert_count":0,"request_count":2,"received_data":6754,"sent_data":1372,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"storage.googleapis.com","ip":{"addr":"142.250.74.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2025-10-12T22:41:47.36458Z","alert_count":0,"request_count":6,"received_data":79661,"sent_data":2861,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"api.trustedform.com","ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2009-02-13","domain_rank":151305,"first_seen":"2012-10-29T05:30:13Z","last_seen":"2025-10-13T07:20:38.349702Z","alert_count":0,"request_count":20,"received_data":25594,"sent_data":10972,"comment":"","tags":null,"fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.lrkt-in.com","ip":{"addr":"104.21.13.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-28","domain_rank":91220,"first_seen":"2024-08-30T10:03:39Z","last_seen":"2025-10-13T15:47:09.135536Z","alert_count":0,"request_count":2,"received_data":972323,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":3,"received_data":227824,"sent_data":2050,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"b.noodledit.com","ip":{"addr":"104.21.50.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":8173,"sent_data":917,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"myeverydaysurge.com","ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2025-09-04","domain_rank":0,"first_seen":"2025-10-16T12:23:10.996954Z","last_seen":"2025-10-16T12:23:10.996954Z","alert_count":0,"request_count":1,"received_data":60568,"sent_data":710,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"create.lidstatic.com","ip":{"addr":"172.66.159.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-08-14","domain_rank":161321,"first_seen":"2015-09-23T19:42:02Z","last_seen":"2025-10-09T16:34:00.971973Z","alert_count":0,"request_count":1,"received_data":128896,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"sassets.noodledit.com","ip":{"addr":"104.21.50.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":12158,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.trustedform.com","ip":{"addr":"3.167.2.111","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2009-02-13","domain_rank":163006,"first_seen":"2020-08-26T23:38:48Z","last_seen":"2025-10-13T18:14:17.473021Z","alert_count":0,"request_count":2,"received_data":132115,"sent_data":957,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b7e89c5a04ac791a3c9898f57dbfa7d","sha1":"bcafefd4c11c016717ecd191484f973e306ad0c3","sha256":"db91af94c10451fd33d174fba0d32f8146a90e76290b5bcbce2632ae9590e05b","sha512":"0bcb1f6d485a1ac1c46539fd556901b78da62cbf2292104e483a24b47d8e49bf11070ee5b95ce8410d6573c8248f3c23ce58bb98c20bb221b20c1b93f722eae1","ssdeep":"","tlshash":"3f61ac6605770970863b609b9f9f1b113120b217b80add4d7e5cca800f9593976eebfd","size":3458,"data":"","first_seen":"2025-10-16T12:23:18.079613Z","last_seen":"2026-03-06T14:57:35.755456Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lrkt-in.com/logger-1.min.js","fqdn":"cdn.lrkt-in.com","domain":"lrkt-in.com","tld":"com"},"ip":{"addr":"104.21.13.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d77229650875697415547c984b40a0","sha1":"00fdddf890eadf8ebb2620c718f14fde786fa8b3","sha256":"d45290fbecc218fbe3c3075b1591398f51d8d52411fa2dcf9ae1f61ac562a2d3","sha512":"a8fcbf591c86c1bed39dbdf17501361fb72e7772fea21ee84cb43abcb5735390e6c20eadeac92dee0363f275ec3a22e6a392b6d71009327f59bff70c2caee4f6","ssdeep":"12288:viEhVxoXUrKVoA3hx86xKLaMk8Y8JxcCnHtTZ3HY5ITQY:Dmd6xcCnHtV3HY5ITZ","tlshash":"1a152b887a99f06203e790e4503f240bf276281d546de0e0f3a6ddd5b86d68e517bf3a","size":913125,"data":"","first_seen":"2025-10-15T23:35:11.411721Z","last_seen":"2026-05-12T06:31:45.82272Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84#back","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5c399557f73fcf0024f42259cf94ee17","sha1":"d2f46cbd088e9b289e63cc23e2377462c6459e3f","sha256":"254e737260e5ff4f6043abc4ab52ee1f9ea6e9eab066b5c7ac1665c4cf75692b","sha512":"45d3f9da1f4948d1f01993e19e0f42c54d7a30187978deddee02d4be94d4567f0045bd1192393f108570bded3f1805f233a5a41dfb9bb164f30086f598a3cc41","ssdeep":"","tlshash":"9e9004f574d311004d57317404571cdc1134c4701c544d744070f4d10c75074551745c","size":46,"data":"","first_seen":"2023-04-11T22:36:29Z","last_seen":"2026-05-22T16:56:21.339601Z","times_seen":25565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2m2wsoho8qq12.cloudfront.net/iframe.html?token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.19.1\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320","fqdn":"d2m2wsoho8qq12.cloudfront.net","domain":"d2m2wsoho8qq12.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cd51f346df303963c1b37adf4cf5ffc","sha1":"591420945a43998c73c8f073b37392c9da46d7b9","sha256":"12124346ed857e2fda603c0145caef606b1a6fe74e7288adabffe45b21183c55","sha512":"11fdf8a355ee339159d2587897580e403f70e5e41db61127dd7722965e59921226f426d557d3d646913f2f615d829f1d52457ee601eb137aab39b3f932f39de7","ssdeep":"96:wJQSXFTLUfavexihhUuw9PCTDsaiqPh23qIanLM/ws1vfp:wJQSVTwfaJhSuwETDsaiuh23qIanLGvx","tlshash":"aa9151047ce721e5297330bc06af5094e6b492172424ca68bc9cb7a45f90f355bbe6fd","size":4303,"data":"","first_seen":"2025-08-08T17:22:11.894914Z","last_seen":"2026-05-22T16:56:21.32959Z","times_seen":3054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fc91ce6f19299f75eeafda215153491","sha1":"675b0c42fddaf38f3b774989372c819e418d14e0","sha256":"5c594e4e2d05e86e9b68533c27792382790f1732e31d0841d48b0ae4bbedac85","sha512":"3e7720573cc18667ad6b8803f68e7d6c10f6ea8e6e87cd7de3d2c03cbdedf7e25f96a20a70052219b08c6b3610223b539db188246601b99ef06e849b791cdd0e","ssdeep":"192:NwziDC/4i7NTmACt4HugAv4qyEDQC9SJHypCyqPMWSLS:N8iQ48mAI4a4Q6","tlshash":"afd19a5925f75538812331ba9bcb8259a2375107bc04ce49be1c96086fc4e689be9bec","size":6293,"data":"","first_seen":"2025-10-16T12:23:18.086812Z","last_seen":"2025-10-16T12:23:18.086812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/trustedform.js?field=xxTrustedFormCertUrl\u0026ping_field=xxTrustedFormPingUrl\u0026l=17606173677580.3889037684102882","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9453474618f318416b603bc3e9596fe3","sha1":"e8d101d4ba45b6a1160e1a98754e339eec2e525b","sha256":"e2bb6abb3d8b6e283de6cdaef9c960534c1087bdbc3c384a41f65e6b73ca5eb2","sha512":"a811e6f011cc30b1a3fd33d073eff398c4b42b7e3987beb11ed9aef9b400ef8e2ca18884c9319e3ea802ef783f5055b808c1f2a5e39dcb74d674654e9f2199b7","ssdeep":"384:uJ5BLkGVfK5k/QoJ69cdlYo4kVW1Wk0PfTKoT2VUSoxs7iy7fSagpLp6bU:uJ5BgUfK5YX69cdlYo4kVW1Wk0PfTKoR","tlshash":"c5921a4ab698b43d0b6721f2a13f920bf3712535390b90504269c9f43e79d8f961bf9e","size":19883,"data":"","first_seen":"2025-09-04T19:11:50.669457Z","last_seen":"2025-10-17T15:33:23.29133Z","times_seen":536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f89ef2f10b096890f71c4cc4f5c8976e","sha1":"a7ee5ec02c98e2f80531218a631c68cec03b33ed","sha256":"d11e955215f03f3f06f0f1e83e8babb13e1472801f219151c389014dba0409d8","sha512":"d8c43596f715c1533ce20daa00217500e8c2ce3b555f990a81806cd284d23efb7cb0125955da2711bd4d4206c1d35409b459b1e4ecfab641a229304625ad6734","ssdeep":"","tlshash":"f5f0fc4b65b1263861a2d0395dcf3504126b0057210d9e35b6ad86009f753090f727db","size":561,"data":"","first_seen":"2025-10-16T12:23:18.090377Z","last_seen":"2026-04-10T15:25:56.570519Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fe070db02c476d996414fa0ad9d9918","sha1":"3fec5a8b313e00fba17706c7dc3411b217cdfe9d","sha256":"2400f73e371d1b51fbe91bdf422edf5bcc54abb73b2e6059c39a103233c34d98","sha512":"36719e9620e1bd5565fb436bb358fb426a5a3fb5c5525134c510ae0ef37973bdff6a0d50ad994b6d529493fcc397e4b15b04c45a26eb149f400f054998b61ef9","ssdeep":"","tlshash":"0dd02b1d41f260325033d02c494dfb4a7d1e0043298def0e3f4c0b007f5432a54b09d8","size":289,"data":"","first_seen":"2025-10-16T12:23:18.094129Z","last_seen":"2026-05-16T15:38:38.564163Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"09dff9c3456ef8e7be3d155a10bcbb7a","sha1":"c0928d8d0da3c3ad551b1f971b70ed3bbb00ff5c","sha256":"f86cacce556ada89d7a41eb5755f781c9b78716b7ab4f1f5ca219c87d73a5d4f","sha512":"4ef5cc53d75b93a1a7acfe07ddf163b51e71ecf7ef90792df9857539d264f256fb520fc8d4d4adc43674b8ae7fdeac632782074798115682c937d8c9f0d92a82","ssdeep":"","tlshash":"6ce0222bac13e9207d8a466722bac0c2716251174400c40034c8c968be70fe84c2d9ac","size":388,"data":"","first_seen":"2025-10-16T12:23:18.101302Z","last_seen":"2026-05-16T15:38:38.563413Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c943430599715468362f04af28f5a3e1","sha1":"c7f842975c39fd5a18133b7e37ce385e4bb6f73b","sha256":"ca1fc0b3580e0fec37a48805bf4035961d1457c2eaab9e47f332ac2466834152","sha512":"5776e1470462e57b78ac9e766dea4698c624305ed1bc6b36490f9ae776632ec1efc9a9cd02717f43bd8863c52159e169b61f07fe90fc96ede3141536db0b0d1f","ssdeep":"","tlshash":"71f0dc8f1d87053cd39b40ef477fd13aa522003e3c01c819b95c88224f01e349c29eac","size":462,"data":"","first_seen":"2025-10-16T12:23:18.105569Z","last_seen":"2025-11-02T20:31:01.780177Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d797f1483582b74730c39bb56a63e80","sha1":"5821118dba6e1f90cc5678bfb2b08140d2e41604","sha256":"5c48174b4c125af9533d880e6fbb705ab6dde063bb30b22b2c4f404abe507e2b","sha512":"c0e2b9d322b0365156b4ca63dc290e7f979b04d8059cefd7abfda3c3b91c80ddd8599fc2985205debeeab5d3de98209410bb4c170ba28c56148c19ca687d4193","ssdeep":"","tlshash":"4f0128f35db2e0204da654032a7fd2193186303bad89f0147eeccd4d5f68eae8974a6c","size":695,"data":"","first_seen":"2025-10-16T12:23:18.108946Z","last_seen":"2025-10-16T12:23:18.108946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-ng.pushy-js.com/scripts/v1/pushnami-adv/6890bea98c1f1c0015d31478","fqdn":"api-ng.pushy-js.com","domain":"pushy-js.com","tld":"com"},"ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad57c574c663326ea083cde7d855c13d","sha1":"411c83380512cda44ac647d5486fd3072b5c1749","sha256":"7e089c468bbe103130d8e8af092020c770c7f5141dc6372442acb710d0fad1fb","sha512":"d00e5ea17032f6337f2c0f0a6963bd5b395075565494c20f422c06991fb4b182047854ba61ed1c693c8a9db4919d2ebce850d352cd14c11bc9208b15a293bbac","ssdeep":"768:iF9EXvd7snMM+eOwhJlQNmMpNvetoNLXDV7C7EjANEw7Lx3N5K9c71mpZ+TOG/CQ:MuF7snrlBuzqoNLXDV7C7RNbhdU9gmj6","tlshash":"d1a3a55f9ce330342aa7713d4fafa418723690036519d910bfcd8b80af9962d46b6bdd","size":102444,"data":"","first_seen":"2025-10-16T12:23:18.075331Z","last_seen":"2025-10-16T12:23:18.075331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84#back","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5923e6a91fd004cc0815f0a5494f6368","sha1":"6f0cc8f774ac9d8240ffe81a9c659c9612d7bb70","sha256":"0510de046e8325540849bad09f31eaaa3e9256fafd330c5d57327dc948812a33","sha512":"e5ba54624003db08781bed22d1504507f374821422ca2b32c5d10a37337f277873807da5f9489f5a5e5ea0eed08d3f0ef450326762ae0f7cb8cd4593b19fa4b7","ssdeep":"","tlshash":"34600030cc3000000c000030000000f00300c0000c300030003000c000300c00c03000","size":14,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-05-22T16:56:21.331527Z","times_seen":5225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustedform.com/trustedform-1.10.25.js","fqdn":"cdn.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"3.167.2.111","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca5dfa48d2653868509a325f3f0ea31d","sha1":"188c055bfe368451b3962289a942c7dfe3af47d2","sha256":"437bbfb0fa93820e9debdc03d6f435ae326c40f36a37744c926f82ad0ee80508","sha512":"9739362424e3a74ee7dbc34f7a42b6bb9597491c251b50aa881c613e6148f6e3bf0e6021f9c18f67d3e9b8184f534d2b719a80dc360175f54d2be36a30bc4b68","ssdeep":"1536:/f6y5/t6L3StlSx/zVXh5HE3AaSkyY2cjTHfVsywC:/f6q/zSxzVxmAagjcjZsy7","tlshash":"03b318cc77c6b07b0ba370b1416f514bb23a6915288ea451d215f8e43c7894fa63bfad","size":111192,"data":"","first_seen":"2025-09-04T19:11:50.654893Z","last_seen":"2025-11-06T15:34:22.960181Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"48205c213ecd7adf307ae12508f2040d","sha1":"2dc7102148fb6a5a3f615c310acdd93d24d0cb12","sha256":"fc548a8ce029c13f921b8499b8edf18866f6d4c3eb58ce34a6e117cac6a6de38","sha512":"144586cbd768f320a47d80c23c61db9d47b1ac26db82319da69da12908ac9df4f27b0212d86c448bcdee870ae0be541a08a690621d69cb5b793de42b0b366a18","ssdeep":"192:EMazkgeYzYyEhatz5bScYbrm1JReiztVYqaMqN0qchRybyCKyaKfzEawWVa0VtU:4TYaHSc6K9qL/aQi","tlshash":"f832dc5d35f7242582ab30bf5f8b424a7a3550073845ce84bf1c87415f90f25aafabe8","size":11554,"data":"","first_seen":"2025-10-16T12:23:18.117486Z","last_seen":"2025-10-16T12:23:18.117486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lrkt-in.com/LogRocket.min.js","fqdn":"cdn.lrkt-in.com","domain":"lrkt-in.com","tld":"com"},"ip":{"addr":"104.21.13.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49c790beefed4fca50b23541fd66161c","sha1":"ab3cdc5ac8c668386ba120a83c1a91a40fdf00cb","sha256":"cc73dcfcdaf10be51faacb4759dc64056ad84a421ef228e02e14d23e41987edb","sha512":"75fc8d9f78a7e28f6083b2e8da718babd9ff93266bddc59e8709e04968c7c7860a7dd8c5b015e36b89b1d25489cffd21b1775ef30a487c46ea1c6777842cf233","ssdeep":"768:vT8YBPTvsFCjfd5B5mmii5jCP42NhkfMK/kqh5wHOULAgciI4nWuvCF:vLP7sKrOEs42Pkfj8qhOHOULAgciI45s","tlshash":"cd43d78d76c1f4f203e3a0b5443f230bf17a69252419e450e363d9d5ad68a9fd123f6a","size":57110,"data":"","first_seen":"2025-10-15T23:35:11.281186Z","last_seen":"2025-10-16T12:23:18.010534Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.lidstatic.com/campaign/166e56d8-f98c-dfc4-c352-b05074f47b54.js?snippet_version=2","fqdn":"create.lidstatic.com","domain":"lidstatic.com","tld":"com"},"ip":{"addr":"172.66.159.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4d02f30bde4cb59cf8fa5955bf75a6e","sha1":"4999682a4abe29aa3a1f8297d06831eb166f86e9","sha256":"b84934565971e9a38a9c4fa976e07465d78041038cc7835087d202bdf18065cb","sha512":"434b8a6ce762293215bbf71aa36df9bb3f96e270d6bb556585083db4a168bb6c2e5ab9c332c401b7e18b6858700ea66f2399ca5f593ca6b46fa47cec2e78a498","ssdeep":"1536:++mXj1DfP47U0tYx5TjFyD7ZL0OPNw0aMcHDOwNz5Q9oYsBB+KB+5TgiBJleKW+i:SS3c/O80gVPzWyV","tlshash":"42c35bc972d4703153bb11aa54bf6206b3365a69380d4420f429ded67c38e8e9277fbe","size":128230,"data":"","first_seen":"2025-10-16T12:23:18.00261Z","last_seen":"2026-01-26T08:03:35.759889Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deviceid.trueleadid.com/iframe.html?token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026apiurl=https://create.leadid.com/2.19.1\u0026uuid=0\u0026method=0\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320","fqdn":"deviceid.trueleadid.com","domain":"trueleadid.com","tld":"com"},"ip":{"addr":"107.23.95.141","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bc7e4d54770e463479bcb28b68b2eb3","sha1":"60be7b50ab84522cc4ebdda054aa4ba084ecbb42","sha256":"4462c17df7d0de661594edabe81a011fc43197cf50aeecbac2a3ea4a077b4aab","sha512":"78f4363b79c836c33056244fc5d26e58c7ae4d49b87f0f3148ccccca17b6b9b1b2ab02c1e297dd183a744d46057fb52879fe1af4604e71bb0e23d95786be21e6","ssdeep":"96:GWV83ridDIOYzgKPqZCYdJKIKLxOLjn70JW0qaVm6etRWZBoLoL:GWlDIzUIwCYdJp376X0sy0L","tlshash":"17914101b64150a5127186ae783f5327f8301b987122bef8f95c8c426bf8a4b52a6f7d","size":4552,"data":"","first_seen":"2025-05-23T11:11:10.123017Z","last_seen":"2025-11-04T09:40:48.977931Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=10\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454280","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:55.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=10\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454280 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 20225\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:55 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:55 GMT; Max-Age=2592000; path=/\nrguserid=1917956d-8588-402a-9b89-24286a36422a; expires=Sat, 15 Nov 2025 12:22:55 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:55 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:55 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/c.noodledit.com/ui/iconset_sweeps_bluegray.svg","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:44:53 GMT","end":"Mon, 15 Dec 2025 08:44:52 GMT"},"fingerprint":{"sha1":"CE:A3:CB:18:91:F6:8D:A5:0D:D6:11:1B:0C:0D:0F:5C:68:B1:53:44","sha256":"A6:31:5D:47:91:DC:EF:C6:B5:2B:56:CC:53:05:87:3A:86:34:93:3F:93:E5:61:1B:9A:D7:7C:E4:85:79:FE:CD"}}},"request":{"raw":"GET /c.noodledit.com/ui/iconset_sweeps_bluegray.svg HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3JE4xQwpFj1m1IFt2VeuqzH4SK1U-1CYD--lVFlrW9siU8YSP1w5yQnO-nmHKeO8TyOmcn7lkY\r\nx-goog-generation: 1748372482699074\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8479\r\nx-goog-hash: crc32c=eiIFwA==, md5=xibkm+AVNB1/g2Z5oE/DuA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8479\r\nserver: UploadServer\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\nexpires: Thu, 16 Oct 2025 13:22:48 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 27 May 2025 19:01:22 GMT\r\netag: \"c626e49be015341d7f836679a04fc3b8\"\r\ncontent-type: image/svg+xml\r\nage: 1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c626e49be015341d7f836679a04fc3b8","sha1":"4f1cec1e0d5d69b03a9f012aa445a8f4d98ec160","sha256":"8f2a95e94e52f7fce06ddce81676b1aec92563b7e4026e3479bc405a760f83b5","sha512":"ee8c0185425ac0277a89952fa0667eba857273cc4dcfa8e431c136a40af99960983129735adacba81f1ef5efba8bfa0e918d2cbc1789cee33eb1279164fd4834","ssdeep":"192:10XHOs0UCTIEPeyFqm/t/FbbB4BBvZ4LcLRAl2s:1081TIEGyYAtFV4BxZ42RAlx","tlshash":"9602a5cc27b49af8fc41f3f7ef11986d7d0665aaaf594e09c3890e4859919ac8d04dc3","first_seen":"2025-10-16T12:23:17.94717Z","last_seen":"2026-05-05T23:01:37.430775Z","times_seen":12,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":102,"dns":57,"connect":11,"send":0,"wait":135,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deviceid.trueleadid.com/iframe.html?token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026apiurl=https://create.leadid.com/2.19.1\u0026uuid=0\u0026method=0\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320","fqdn":"deviceid.trueleadid.com","domain":"trueleadid.com","tld":"com"},"ip":{"addr":"107.23.95.141","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://d2m2wsoho8qq12.cloudfront.net/iframe.html?token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.19.1\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320","date":"2025-10-16T12:22:49.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"deviceid.trueleadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:91:05:C5:C9:28:B0:D4:7B:EC:52:76:7E:BA:B5:CA:2C:01:E2:06","sha256":"C0:9B:33:61:23:D9:51:C5:E6:38:B8:F9:DD:D6:9A:51:7F:01:D2:61:75:D7:68:05:32:C1:E7:BF:FA:FC:D8:8B"}}},"request":{"raw":"GET /iframe.html?token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026apiurl=https://create.leadid.com/2.19.1\u0026uuid=0\u0026method=0\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320 HTTP/1.1\r\nHost: deviceid.trueleadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://d2m2wsoho8qq12.cloudfront.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:49 GMT\r\ncontent-type: text/html\r\nserver: nginx\r\nexpires: Fri, 17 Oct 2025 12:22:49 GMT\r\np3p: CP=\"NOI DSP COR NID CUR ADM DEV OUR BUS\"\r\ncache-control: max-age=86400, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4634,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4573)","md5":"302537fa9db9e252669d3198982c308d","sha1":"5c97e529832f1b3f925b9f373c5adebff131102a","sha256":"cf384d6055e3d82b6268e0fa5bb2771b450ebdfa94513d5f75048a6894758f8b","sha512":"b2a438e2d2d961b959b295f6d0486cf96c50d32e61bea35ed108bbe9f1deba8d864432be0c6b8e4d881d67c26f8bdc0836aaf54d27385d45e505d4ea50ba1bdb","ssdeep":"96:HWV83ridDIOYzgKPqZCYdJKIKLxOLjn70JW0qaVm6etRWZBoLoQ:HWlDIzUIwCYdJp376X0sy0Q","tlshash":"81a15301b55150a5127186af783f5327f8301b987122bef8f95c8c426bf8b4b52a6f7d","first_seen":"2025-05-23T11:11:10.097634Z","last_seen":"2025-11-04T09:40:48.959315Z","times_seen":709,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":357,"dns":67,"connect":94,"send":0,"wait":95,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=16\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454286","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:02.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=16\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454286 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 56422\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:23:02 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:23:02 GMT; Max-Age=2592000; path=/\nrguserid=1041ed72-b59c-4c9e-97fb-e32f546266c8; expires=Sat, 15 Nov 2025 12:23:02 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:23:02 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:23:02 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=19\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454289","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:04.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=19\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454289 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 26777\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:23:04 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:23:04 GMT; Max-Age=2592000; path=/\nrguserid=9df1ae30-79a4-417f-b863-4ec5fae076b8; expires=Sat, 15 Nov 2025 12:23:04 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:23:04 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:23:04 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:05.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 423\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:23:05 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:52.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 526\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:54.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 422\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:54 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/trustedform.js?field=xxTrustedFormCertUrl\u0026ping_field=xxTrustedFormPingUrl\u0026l=17606173677580.3889037684102882","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"GET /trustedform.js?field=xxTrustedFormCertUrl\u0026ping_field=xxTrustedFormPingUrl\u0026l=17606173677580.3889037684102882 HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: awselb/2.0\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 134\r\nlocation: https://cdn.trustedform.com:443/bootstrap.js?field=xxTrustedFormCertUrl\u0026ping_field=xxTrustedFormPingUrl\u0026l=17606173677580.3889037684102882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19883,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":279,"dns":15,"connect":92,"send":0,"wait":92,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCm3FwrK3iLTcvnUwQT9mIzF59cKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcCm3FwrK3iLTcvnUwQT9mIzF59cKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 79496\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 18:02:12 GMT\r\nexpires: Thu, 15 Oct 2026 18:02:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 66035\r\nlast-modified: Tue, 09 Sep 2025 18:37:29 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79496, version 1.0","md5":"ab98228b3e92ae3e3f241e7a9b7ca630","sha1":"ebe06739d95b60454d7b38a440ffe8db64df00c1","sha256":"041ef627fbae99b122618fe3914efbabe716463067148fc551b77e2f6182904b","sha512":"464a8d440bddd2b41072d14c1f5d9085d44e50050f1c7c0ef95da36cb595ba7598381f1568499c211a7f016c6c89b2adbc98d9684a330bc28bb7960637e5b040","ssdeep":"1536:c9KU3q+E7Djj11CR9bwL7KzFXE4yJwwoFrELz/6aJoC+T+pF2B7KU+lVDVtW/:c9t3lELOR9bOSZnwoFrQz/6autapFbU/","tlshash":"dd7302887d3e54bc5f9311b0d069399bee6a2f433d3a7d00ce9faa1c4511b5920396c7","first_seen":"2025-05-29T18:51:29.056319Z","last_seen":"2026-05-22T17:07:02.073406Z","times_seen":3210,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":99,"dns":0,"connect":15,"send":0,"wait":16,"receive":33,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.noodledit.com/pages/light-green-checkmark.svg","fqdn":"b.noodledit.com","domain":"noodledit.com","tld":"com"},"ip":{"addr":"104.21.50.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noodledit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:10:19 GMT","end":"Tue, 06 Jan 2026 16:09:03 GMT"},"fingerprint":{"sha1":"74:E6:6F:7F:4B:81:D2:8F:1E:06:F8:5A:43:F7:59:AA:37:6A:22:D5","sha256":"29:BD:B8:A2:47:4A:B2:B8:ED:70:B8:3A:5A:4C:0D:8A:DA:91:22:20:F9:41:06:AA:55:D2:AD:90:54:87:DE:36"}}},"request":{"raw":"GET /pages/light-green-checkmark.svg HTTP/1.1\r\nHost: b.noodledit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\ncontent-type: image/svg+xml\r\nx-guploader-uploadid: AAwnv3JGSjbpdKR08ZUG1q4r_J2RNQuV_grlHfkulBxQVCzXsgvQqf9kpMqGiAbSbAArzaoc\r\nx-goog-generation: 1741807499731975\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 605\r\nx-goog-hash: crc32c=RueHSA==, md5=J4Ukn8JD4qNRehmewVhs0g==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvuJdbysWzjSV%2F%2BZpk0JrQXr8fMwwf%2F0Ay%2F%2Fg9%2F12Ww0L5VQlUzCc8hhuPm6wwgCMsnkCKAMtMawTTj497GcQuGkHN8ZpsuMDOphLJYXUQ%3D%3D\"}]}\r\nserver: cloudflare\r\nexpires: Thu, 16 Oct 2025 13:22:47 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 12 Mar 2025 19:24:59 GMT\r\nvary: accept-encoding\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2785249fc243e2a3517a199ec1586cd2\"\r\ncontent-encoding: br\r\ncf-ray: 98f7861378c9c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2785249fc243e2a3517a199ec1586cd2","sha1":"a5a1863d88d992b878f669e792b6e9359bb193e1","sha256":"5217b28aa6e848d1aac24dd0bf5f9771f691768b7cf6b97083a3c55b39808fd0","sha512":"addf06e24e8d767c21d71c60e9116bcb716129be30237e5d96470beedabd72b785815ca080146eede74639734f5c07670ee559e12e402dbf63018b6764903ad6","ssdeep":"","tlshash":"5ef047a5d3784541b68987b0d43ed4071b4714ff26d04712c2f4de9079140d55c0e8ea","first_seen":"2025-10-16T12:23:17.960983Z","last_seen":"2025-12-04T03:23:49.751012Z","times_seen":3,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":164,"dns":27,"connect":4,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.noodledit.com/promotions/walmart.svg","fqdn":"b.noodledit.com","domain":"noodledit.com","tld":"com"},"ip":{"addr":"104.21.50.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noodledit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:10:19 GMT","end":"Tue, 06 Jan 2026 16:09:03 GMT"},"fingerprint":{"sha1":"74:E6:6F:7F:4B:81:D2:8F:1E:06:F8:5A:43:F7:59:AA:37:6A:22:D5","sha256":"29:BD:B8:A2:47:4A:B2:B8:ED:70:B8:3A:5A:4C:0D:8A:DA:91:22:20:F9:41:06:AA:55:D2:AD:90:54:87:DE:36"}}},"request":{"raw":"GET /promotions/walmart.svg HTTP/1.1\r\nHost: b.noodledit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\ncontent-type: image/svg+xml\r\nx-guploader-uploadid: AAwnv3JmvUdlkVJ9FUgulmLupLgVEl6pLcbI3RYthC0rVc1lPYAFh8eVoXxPeeLdcp0xt8R9\r\nexpires: Thu, 16 Oct 2025 13:22:47 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 22 Aug 2025 16:34:19 GMT\r\nvary: accept-encoding\r\nx-goog-generation: 1755880459397985\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 5447\r\nx-goog-hash: crc32c=nOK0PQ==, md5=jHPjCi1Zyj11J7k19Ezkzg==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCbdyBYYffkKOF4ZRtl3Yyqq8Bgon9HigqPh67HVJQ4xehDcwT6OSZ1BLbiHS22Ptq%2BEh5iOF8ggBoidlSJO7qZIeFpVrrFvB3rGU4YDpA%3D%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8c73e30a2d59ca3d7527b935f44ce4ce\"\r\ncontent-encoding: br\r\ncf-ray: 98f7861378ccc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5447,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c73e30a2d59ca3d7527b935f44ce4ce","sha1":"c93166ae8c24cfc7b416445bce9182f2501d8f79","sha256":"f0be941006024c566ec56b848237971c8c64c7aff28c1e702d42d1799553641a","sha512":"84ae4eb98ce7a3c28e389f31f4cceea27de503ac32aa9bc7856915c71fa254242b7cb0af6c5842e53b1c453e9fa06abf12399f9882a2e8150c18861d2077974b","ssdeep":"96:cIoiqT4QGWaPMPfjsQVA9HWBrJjlkM7mQ/7lUrjOWDEkm:cIoiYGMfopgtJjlkqmE7lUOWDEr","tlshash":"39b156ee2f200ce0ded5a7caff02209c604b94779e958b14d2cc8b9d788586ddda5ec5","first_seen":"2025-08-23T14:17:12.810294Z","last_seen":"2026-01-26T08:03:35.765127Z","times_seen":6,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:59.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 418\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:59 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=7\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454277","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:54.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=7\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454277 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 18760\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguserid=392d9f8d-4e15-4cb2-ae18-7662637f7faa; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:03.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 423\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:23:03 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T12:22:46.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myeverydaysurge.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Sep 2025 01:16:14 GMT","end":"Sat, 20 Dec 2025 02:00:20 GMT"},"fingerprint":{"sha1":"2A:5A:2D:17:2D:C4:F4:72:20:59:D6:01:3D:90:01:F4:0F:CD:68:FA","sha256":"00:B8:79:63:76:3C:BB:14:D7:C2:6C:E8:05:2D:F3:76:3D:A7:4C:9A:DF:27:4D:57:29:95:56:A6:5D:12:44:9E"}}},"request":{"raw":"GET /journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84 HTTP/1.1\r\nHost: 16.myeverydaysurge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _session=85e22e56-2fd9-42b7-8db3-369f9fdc4b84\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\nx-correlation-id: dd82551e-152b-45be-a332-f2eb23a7d633\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\nserver: Google Frontend\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":59875,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (374)","md5":"0ea8a673093d9bd5c9140765bb15e314","sha1":"b41a0654b979e7594bfa26ea7418f8f7eac42d2d","sha256":"67db6534363a6993b8905416ec98a989dee85b9fe10a85156749637a578df4c7","sha512":"747cb09820efe779458d5b3618e32732d86cda19f55102a883b492b7c85cc1b8baa47180d46d31a35a0a257c5a0ad2c3c5b97cd07a9a179817fac451deae7fd6","ssdeep":"768:jipB1NFFkTFFJqwx56fWCwxQTodDqpVZeNZ2tAO7UKI/FFkFNH0C9IS2:jipB1NF2Ywx56fqxf64Z9ONQmn0CK","tlshash":"3a43955b25f31010a963a4bd6fe7170a32658003e90bcd947e9c9788cfc9e956af27dc","first_seen":"2025-10-16T12:23:17.972086Z","last_seen":"2025-10-16T12:23:17.972086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/c.noodledit.com/ui/icon_cart_blue.svg","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:44:53 GMT","end":"Mon, 15 Dec 2025 08:44:52 GMT"},"fingerprint":{"sha1":"CE:A3:CB:18:91:F6:8D:A5:0D:D6:11:1B:0C:0D:0F:5C:68:B1:53:44","sha256":"A6:31:5D:47:91:DC:EF:C6:B5:2B:56:CC:53:05:87:3A:86:34:93:3F:93:E5:61:1B:9A:D7:7C:E4:85:79:FE:CD"}}},"request":{"raw":"GET /c.noodledit.com/ui/icon_cart_blue.svg HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3J2fMVi4XuGsoXF3TA1DznHLIkx6VNn3Vq_Lv0cx5NlWCu5i-0PLpAwTNVl-Ws0QjLKdw5nxcE\r\nx-goog-generation: 1748372684579961\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 45558\r\nx-goog-hash: crc32c=yFEgKg==, md5=3lUO5Xa95SlMW2vAS9Qyow==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 45558\r\nserver: UploadServer\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\nexpires: Thu, 16 Oct 2025 13:22:48 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 27 May 2025 19:04:44 GMT\r\netag: \"de550ee576bde5294c5b6bc04bd432a3\"\r\ncontent-type: image/svg+xml\r\nage: 1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":45558,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de550ee576bde5294c5b6bc04bd432a3","sha1":"5f396e4f2e1b656493e34f4af3d24d59f60b1e65","sha256":"c29944877db5275ea85df6f821c29688236fae1789f1cfce93cecd63b08735e8","sha512":"2288d20f646f393454ffd85d431822b9173710efac0695d9cf33cddf8ab70192af20e44fce557a65c35130021bd447063083e74ee5f1c41f4c39ba1830414770","ssdeep":"768:Hx8IpDQAx8IpDQuT0jZNexNcjR/aLOqWiclVTo5bOIPi8tvLpLkz10tjzOQ:mm8myekjRAOqWiclgl3zOQ","tlshash":"7713528477a592b9f104bafc431268757e663ce67832c1adc7e71c1ae85205c0d7ecab","first_seen":"2025-10-16T12:23:17.976584Z","last_seen":"2026-05-05T23:01:37.412204Z","times_seen":12,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":91,"dns":53,"connect":21,"send":0,"wait":132,"receive":10,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/SaveDeviceId.js?xff=91.90.42.154\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026methods=48\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026uuid=0","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deviceid.trueleadid.com/iframe.html?token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026apiurl=https://create.leadid.com/2.19.1\u0026uuid=0\u0026method=0\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320","date":"2025-10-16T12:22:49.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"GET /2.19.1/SaveDeviceId.js?xff=91.90.42.154\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026methods=48\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026uuid=0 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://deviceid.trueleadid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:49 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrguserid=bf2433b7-3dae-4f7b-90a1-438077ba94f8; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:55.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 418\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:55 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=14\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454284","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:59.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=14\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454284 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 23137\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:59 GMT; Max-Age=2592000; path=/\nrguserid=c0f49c7c-49c3-4122-a267-131e617d10ef; expires=Sat, 15 Nov 2025 12:22:59 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:59 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:59 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=20\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454290","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:05.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=20\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454290 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 27505\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:23:05 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:23:05 GMT; Max-Age=2592000; path=/\nrguserid=ba70beec-4a15-4eb4-a91d-23de1f1bb1b1; expires=Sat, 15 Nov 2025 12:23:05 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:23:05 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:23:05 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myeverydaysurge.com/?address1=\u0026address2=\u0026c=15552\u0026campaignid=7\u0026city=\u0026dob=\u0026email=\u0026first_name=\u0026gender=\u0026last_name=\u0026phone=\u0026sid1=462\u0026sid2=\u0026sid3=ff08c61015c7460cb1cc59f7ff2e9bee\u0026sid4=\u0026sid5=\u0026state=\u0026transaction_id=37bc817b2b334b60bfba91fcbb52a162\u0026zip=","fqdn":"myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T12:22:46.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myeverydaysurge.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Sep 2025 01:16:14 GMT","end":"Sat, 20 Dec 2025 02:00:20 GMT"},"fingerprint":{"sha1":"2A:5A:2D:17:2D:C4:F4:72:20:59:D6:01:3D:90:01:F4:0F:CD:68:FA","sha256":"00:B8:79:63:76:3C:BB:14:D7:C2:6C:E8:05:2D:F3:76:3D:A7:4C:9A:DF:27:4D:57:29:95:56:A6:5D:12:44:9E"}}},"request":{"raw":"GET /?address1=\u0026address2=\u0026c=15552\u0026campaignid=7\u0026city=\u0026dob=\u0026email=\u0026first_name=\u0026gender=\u0026last_name=\u0026phone=\u0026sid1=462\u0026sid2=\u0026sid3=ff08c61015c7460cb1cc59f7ff2e9bee\u0026sid4=\u0026sid5=\u0026state=\u0026transaction_id=37bc817b2b334b60bfba91fcbb52a162\u0026zip= HTTP/1.1\r\nHost: myeverydaysurge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://16.myeverydaysurge.com/?address1=\u0026address2=\u0026c=15552\u0026campaignid=7\u0026city=\u0026dob=\u0026email=\u0026first_name=\u0026gender=\u0026last_name=\u0026phone=\u0026sid1=462\u0026sid2=\u0026sid3=ff08c61015c7460cb1cc59f7ff2e9bee\u0026sid4=\u0026sid5=\u0026state=\u0026transaction_id=37bc817b2b334b60bfba91fcbb52a162\u0026zip=\r\nx-content-type-options: nosniff\r\nx-correlation-id: 7c0624f6-4aaf-4da4-86bf-f9d0fd31f177\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cloud-trace-context: d359b89e3499ad17ccd2cc4d09dc317e\r\ndate: Thu, 16 Oct 2025 12:22:46 GMT\r\ncontent-type: text/html\r\nserver: Google Frontend\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":59875,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":992,"timings":{"blocked":257,"dns":9,"connect":25,"send":0,"wait":477,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 00:03:13 GMT\r\nexpires: Thu, 15 Oct 2026 00:03:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130774\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-22T17:19:46.939936Z","times_seen":231464,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":301,"dns":0,"connect":27,"send":0,"wait":16,"receive":1,"ssl":281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.lrkt-in.com/i?a=9533gz%2Fprize-zappy-noodle\u0026r=6-0199ecf9-0994-7b62-969a-d774e5888984\u0026t=5cef838f-03e3-42a1-a66b-8f78235247aa\u0026s=0\u0026ro=t\u0026st=web\u0026rs=0%2Cu","fqdn":"r.lrkt-in.com","domain":"lrkt-in.com","tld":"com"},"ip":{"addr":"104.198.23.205","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.logrocket.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 12:32:54 GMT","end":"Sun, 11 Jan 2026 12:32:53 GMT"},"fingerprint":{"sha1":"2B:CB:2F:04:D4:7D:44:DB:2E:A6:CE:6B:D0:56:90:D8:80:14:57:E9","sha256":"26:83:FA:F5:E2:9B:33:84:F1:24:43:B5:F6:33:55:66:3E:34:7F:D6:66:AA:95:DC:82:81:BD:39:89:95:11:40"}}},"request":{"raw":"OPTIONS /i?a=9533gz%2Fprize-zappy-noodle\u0026r=6-0199ecf9-0994-7b62-969a-d774e5888984\u0026t=5cef838f-03e3-42a1-a66b-8f78235247aa\u0026s=0\u0026ro=t\u0026st=web\u0026rs=0%2Cu HTTP/1.1\r\nHost: r.lrkt-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-logrocket-relay-version\r\nReferer: https://16.myeverydaysurge.com/\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-logrocket-upload-max-interval: 30000\r\nx-logrocket-upload-max-size: 50000000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-Relay-Version\r\naccess-control-expose-headers: X-LogRocket-Upload-Max-Interval,X-LogRocket-Upload-Max-Size\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":724,"timings":{"blocked":290,"dns":60,"connect":120,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/c.noodledit.com/ui/icon_shield_blue.svg","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:44:53 GMT","end":"Mon, 15 Dec 2025 08:44:52 GMT"},"fingerprint":{"sha1":"CE:A3:CB:18:91:F6:8D:A5:0D:D6:11:1B:0C:0D:0F:5C:68:B1:53:44","sha256":"A6:31:5D:47:91:DC:EF:C6:B5:2B:56:CC:53:05:87:3A:86:34:93:3F:93:E5:61:1B:9A:D7:7C:E4:85:79:FE:CD"}}},"request":{"raw":"GET /c.noodledit.com/ui/icon_shield_blue.svg HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3LQpfoqdgbw4HP8g7rGe2Q4zPS3DtRwj9vxdZOZ7LO7T1misYKyQXnyncBnWXjxT2vP3RtI0L0\r\nx-goog-generation: 1748372684815451\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2066\r\nx-goog-hash: crc32c=eJ7eQQ==, md5=xd0pHBowtVUs6YRBlPpt2w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2066\r\nserver: UploadServer\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\nexpires: Thu, 16 Oct 2025 13:22:48 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 27 May 2025 19:04:44 GMT\r\netag: \"c5dd291c1a30b5552ce9844194fa6ddb\"\r\ncontent-type: image/svg+xml\r\nage: 1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2066,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5dd291c1a30b5552ce9844194fa6ddb","sha1":"c4541217402080e3799c5be6c8eb7aed8e5fbe7a","sha256":"2115d390034a110172a56f9ed0b77299707b381be6f1769f74155b655556ed96","sha512":"86ecde3b9213dd792180d03e0801d86d8559175682ce338d9cad7749db33ce4e4a7cc23580c45c7491aa071fe3cb83b9648fcf3e74a15df52f0900e590707dbe","ssdeep":"","tlshash":"1f417599b3d961a8d400b3e66717e83939461fe6ff3ac522d7f06c08b81a04c58ac4df","first_seen":"2025-10-16T12:23:17.988141Z","last_seen":"2026-05-05T23:01:37.431899Z","times_seen":12,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":92,"dns":56,"connect":11,"send":0,"wait":144,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/c.noodledit.com/ui/icon_card_blue.svg","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:44:53 GMT","end":"Mon, 15 Dec 2025 08:44:52 GMT"},"fingerprint":{"sha1":"CE:A3:CB:18:91:F6:8D:A5:0D:D6:11:1B:0C:0D:0F:5C:68:B1:53:44","sha256":"A6:31:5D:47:91:DC:EF:C6:B5:2B:56:CC:53:05:87:3A:86:34:93:3F:93:E5:61:1B:9A:D7:7C:E4:85:79:FE:CD"}}},"request":{"raw":"GET /c.noodledit.com/ui/icon_card_blue.svg HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3J36jKQlIPkz96d9JUPpwnBfvfNxXDecM-9d109AF4Q5UJ87oHT1ntqGD-TCx3r1EAJur7ADIc\r\nx-goog-generation: 1748372684565104\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1240\r\nx-goog-hash: crc32c=W66Pxg==, md5=218NtmnaMx+YqtMC6C1JaA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1240\r\nserver: UploadServer\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\nexpires: Thu, 16 Oct 2025 13:22:48 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 27 May 2025 19:04:44 GMT\r\netag: \"db5f0db669da331f98aad302e82d4968\"\r\ncontent-type: image/svg+xml\r\nage: 1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1240,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db5f0db669da331f98aad302e82d4968","sha1":"95fa3d1025f6bd2958cf81f2ee6eb1e23123b99f","sha256":"e71fa126e7644ecfca7449fec01e48673785212ac0b59acd8e9457ca60d7c59b","sha512":"e5c17191f1ebf362bc5b464aa8b0aa87c5130f050d43404e35d61717f881d9a10609857c4a76687ab8f64b75dd3a198fcd198b2de83089d0655578b04eafe94e","ssdeep":"","tlshash":"3521dfb572d2b130f402f7de27aaa40d7306324695b6c8c2916398859528aec872ecc2","first_seen":"2025-10-16T12:23:17.993196Z","last_seen":"2026-05-05T23:01:37.419239Z","times_seen":12,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":103,"dns":54,"connect":10,"send":0,"wait":133,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/InitFormData?msn=4\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454274","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:49.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/InitFormData?msn=4\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454274 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1076\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:50 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:50 GMT; Max-Age=2592000; path=/\nrguserid=2f834262-a9c2-43d2-b562-f3bd4b8bfb53; expires=Sat, 15 Nov 2025 12:22:50 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:50 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:50 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=18\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454288","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:03.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=18\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454288 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 26049\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:23:03 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:23:03 GMT; Max-Age=2592000; path=/\nrguserid=0669ec10-9859-43a8-a0bf-47ec8bbc085b; expires=Sat, 15 Nov 2025 12:23:03 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:23:03 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:23:03 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 09:05:50 GMT\r\nexpires: Thu, 15 Oct 2026 09:05:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 98217\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-05-22T17:07:02.072943Z","times_seen":23815,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 00:02:49 GMT\r\nexpires: Thu, 15 Oct 2026 00:02:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130798\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-05-22T17:19:46.937959Z","times_seen":242998,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:53.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 418\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:53 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=6\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454276","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:54.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=6\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454276 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 241206\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguserid=8ac044ca-da52-4c0a-970a-2584a7220581; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":300,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=9\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454279","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:54.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=9\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454279 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 19488\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguserid=0342439e-4a26-40bc-9391-9f9ad58feabf; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:56.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 422\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:56 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.lidstatic.com/campaign/166e56d8-f98c-dfc4-c352-b05074f47b54.js?snippet_version=2","fqdn":"create.lidstatic.com","domain":"lidstatic.com","tld":"com"},"ip":{"addr":"172.66.159.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lidstatic.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 16:58:17 GMT","end":"Mon, 08 Dec 2025 16:58:16 GMT"},"fingerprint":{"sha1":"DF:C7:8A:70:AC:5B:E9:80:28:EC:37:35:93:AD:EF:0E:26:74:82:62","sha256":"98:32:69:17:E1:C7:1F:36:48:98:FF:B4:1D:1D:C3:2F:0B:C3:F1:97:75:74:63:25:17:73:65:12:4C:48:B6:DF"}}},"request":{"raw":"GET /campaign/166e56d8-f98c-dfc4-c352-b05074f47b54.js?snippet_version=2 HTTP/1.1\r\nHost: create.lidstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: nouROxMroqNltOfCp898Kke1nM3KGv59ncK2JNfPfLfM/kVZoTeOYaeVAS8qN573WSRLHZXiKpvxfRCKoe5BIR+l5gVzF/G0ubJDI4oM5u8=\r\nx-amz-request-id: FXWK0AWW89H927EP\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 23 Sep 2025 21:16:48 GMT\r\naccess-control-allow-origin: *\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=1800\r\nx-amz-version-id: ZsoQXVgOw.yGHi21_ibfPuMDpJ0I831Y\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\netag: W/\"d4d02f30bde4cb59cf8fa5955bf75a6e\"\r\ncontent-encoding: br\r\ncf-ray: 98f786152ea01525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":128230,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"d4d02f30bde4cb59cf8fa5955bf75a6e","sha1":"4999682a4abe29aa3a1f8297d06831eb166f86e9","sha256":"b84934565971e9a38a9c4fa976e07465d78041038cc7835087d202bdf18065cb","sha512":"434b8a6ce762293215bbf71aa36df9bb3f96e270d6bb556585083db4a168bb6c2e5ab9c332c401b7e18b6858700ea66f2399ca5f593ca6b46fa47cec2e78a498","ssdeep":"1536:++mXj1DfP47U0tYx5TjFyD7ZL0OPNw0aMcHDOwNz5Q9oYsBB+KB+5TgiBJleKW+i:SS3c/O80gVPzWyV","tlshash":"42c35bc972d4703153bb11aa54bf6206b3365a69380d4420f429ded67c38e8e9277fbe","first_seen":"2025-10-16T12:23:18.00261Z","last_seen":"2026-01-26T08:03:35.759889Z","times_seen":26,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":41,"dns":34,"connect":1,"send":0,"wait":491,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.lrkt-in.com/i?a=9533gz%2Fprize-zappy-noodle\u0026r=6-0199ecf9-0994-7b62-969a-d774e5888984\u0026t=5cef838f-03e3-42a1-a66b-8f78235247aa\u0026s=0\u0026ro=t\u0026st=web\u0026rs=0%2Cu","fqdn":"r.lrkt-in.com","domain":"lrkt-in.com","tld":"com"},"ip":{"addr":"104.198.23.205","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.logrocket.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 12:32:54 GMT","end":"Sun, 11 Jan 2026 12:32:53 GMT"},"fingerprint":{"sha1":"2B:CB:2F:04:D4:7D:44:DB:2E:A6:CE:6B:D0:56:90:D8:80:14:57:E9","sha256":"26:83:FA:F5:E2:9B:33:84:F1:24:43:B5:F6:33:55:66:3E:34:7F:D6:66:AA:95:DC:82:81:BD:39:89:95:11:40"}}},"request":{"raw":"POST /i?a=9533gz%2Fprize-zappy-noodle\u0026r=6-0199ecf9-0994-7b62-969a-d774e5888984\u0026t=5cef838f-03e3-42a1-a66b-8f78235247aa\u0026s=0\u0026ro=t\u0026st=web\u0026rs=0%2Cu HTTP/1.1\r\nHost: r.lrkt-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-LogRocket-Relay-Version: 2025.8.0\r\nContent-Type: application/octet-stream\r\nContent-Length: 0\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-expose-headers: X-LogRocket-Upload-Max-Interval,X-LogRocket-Upload-Max-Size\r\nx-logrocket-upload-max-interval: 30000\r\nx-logrocket-upload-max-size: 50000000\r\netag: W/\"1402-/MwWA8utOFRY8Z9KMnA6RJPQF+k\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-Relay-Version\r\naccess-control-max-age: 1728000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5122,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5341717ea072fb94ad24ef4a769b6fc9","sha1":"fccc1603cbad385458f19f4a32703a4493d017e9","sha256":"0fdbd1f650b5b32ea30ede3ac0e0dfd113a607e69aa6090c998533d8d0578e51","sha512":"59590e0d0903d293169fed91dbc49f89789f1e4bd282afba43d6cd60010bcb423a4c348844540930f0d1a7fd1b79c18f0f51c5bd1f2c15c4f01b88532907de93","ssdeep":"48:63TZfUHxOZ2iDcAEb5TNN+fRsBXeSSwEvS6DovMHQPCBRBbTICIkloX8UoLotM01:qTZfYVN+pKlSwEvS61wPcTIGt08TE7ou","tlshash":"09b1035457464c7f9b480365808e1eca88e03023e7e5ecf4eefcd8ac926cb155f99ab5","first_seen":"2025-10-16T12:23:18.006179Z","last_seen":"2025-10-16T12:23:18.006179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/SaveDom?msn=2\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454272","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:49.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/SaveDom?msn=2\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454272 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 503\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:49 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrguserid=fc11e58c-95c2-417f-9855-32da76b255be; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/snapshot","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:49.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/snapshot HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 12963\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:49 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=13\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454283","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:58.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=13\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454283 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 22409\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:58 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:58 GMT; Max-Age=2592000; path=/\nrguserid=09e15453-1bbf-4f5f-a3eb-468cea17d16e; expires=Sat, 15 Nov 2025 12:22:58 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:58 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:58 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lrkt-in.com/LogRocket.min.js","fqdn":"cdn.lrkt-in.com","domain":"lrkt-in.com","tld":"com"},"ip":{"addr":"104.21.13.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lrkt-in.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 19:10:55 GMT","end":"Tue, 13 Jan 2026 20:08:40 GMT"},"fingerprint":{"sha1":"90:16:9E:CC:A3:C3:2B:BA:91:D2:C6:A1:A5:18:43:F5:2C:AF:0E:85","sha256":"01:FA:2C:C1:BB:67:77:90:03:86:81:24:0E:D4:D3:C3:A6:F5:F7:BD:E2:35:AD:25:FE:E6:E8:D2:5C:85:19:2C"}}},"request":{"raw":"GET /LogRocket.min.js HTTP/1.1\r\nHost: cdn.lrkt-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 13645\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\netag: \"54bde88a615139b8f8685017e51fa5c2da23b14f21bd1bd19acee8233a1b16fc-br\"\r\nlast-modified: Wed, 15 Oct 2025 20:55:26 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: HIT\r\nx-cache-hits: 7\r\nx-timer: S1760580259.361819,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVp17BYgMmWr9nj99CnHWZ%2BLyt%2B8%2BTM4P2JjJO2bioNoWgYut6XAx%2BDq7hBXWkTfDTCxCLvbk1XNxZxBKuIHDoSZVGKElfApwh5HDIM22g%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 98f78612ef36c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57110,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57051)","md5":"49c790beefed4fca50b23541fd66161c","sha1":"ab3cdc5ac8c668386ba120a83c1a91a40fdf00cb","sha256":"cc73dcfcdaf10be51faacb4759dc64056ad84a421ef228e02e14d23e41987edb","sha512":"75fc8d9f78a7e28f6083b2e8da718babd9ff93266bddc59e8709e04968c7c7860a7dd8c5b015e36b89b1d25489cffd21b1775ef30a487c46ea1c6777842cf233","ssdeep":"768:vT8YBPTvsFCjfd5B5mmii5jCP42NhkfMK/kqh5wHOULAgciI4nWuvCF:vLP7sKrOEs42Pkfj8qhOHOULAgciI45s","tlshash":"cd43d78d76c1f4f203e3a0b5443f230bf17a69252419e450e363d9d5ad68a9fd123f6a","first_seen":"2025-10-15T23:35:11.281186Z","last_seen":"2025-10-16T12:23:18.010534Z","times_seen":5,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":16,"receive":2,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Dela+Gothic+One\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Red+Hat+Text:ital,wght@0,300..700;1,300..700\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Dela+Gothic+One\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Red+Hat+Text:ital,wght@0,300..700;1,300..700\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 12:22:47 GMT\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148658,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1981)","md5":"abd0d56ee5beb0a2b830cd7cbf329021","sha1":"f5bad965dd38c3ed6ca5ac0d9c197444d7cbdd8c","sha256":"497af9a8c9e017271077011ed7117eee2dd4e5f3160e4495d5c61d0e3afbf187","sha512":"284f41eef873bdbd5a3ea7ed5c7feb04810950fa64afa5fe3c4f28593b34631253b37f866b6d20e048363d08efa9718a16a4bceb4bf3e47785417b0626970717","ssdeep":"3072:/Xr4NuzYvtObb7bGq1ix6o62uh6lyCvcLJW3/Oj3FoApyk4IFiHTZ8D2hzHxWHiG:/Xr4NuzYVObb/Gq1ix6o62uh6lyCvAJv","tlshash":"9ae34090440749cefee32cd252deed25fe9d6079f881c82c57f918c6ac5a49ad1c6b8c","first_seen":"2025-10-16T12:23:18.013204Z","last_seen":"2026-05-16T15:38:38.53697Z","times_seen":35,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":217,"dns":1,"connect":28,"send":0,"wait":46,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:06.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 419\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:23:06 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCm3FwrK3iLTcvnUwQT9mIzF59cKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcCm3FwrK3iLTcvnUwQT9mIzF59cKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 79496\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 18:02:12 GMT\r\nexpires: Thu, 15 Oct 2026 18:02:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 66035\r\nlast-modified: Tue, 09 Sep 2025 18:37:29 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79496, version 1.0","md5":"ab98228b3e92ae3e3f241e7a9b7ca630","sha1":"ebe06739d95b60454d7b38a440ffe8db64df00c1","sha256":"041ef627fbae99b122618fe3914efbabe716463067148fc551b77e2f6182904b","sha512":"464a8d440bddd2b41072d14c1f5d9085d44e50050f1c7c0ef95da36cb595ba7598381f1568499c211a7f016c6c89b2adbc98d9684a330bc28bb7960637e5b040","ssdeep":"1536:c9KU3q+E7Djj11CR9bwL7KzFXE4yJwwoFrELz/6aJoC+T+pF2B7KU+lVDVtW/:c9t3lELOR9bOSZnwoFrQz/6autapFbU/","tlshash":"dd7302887d3e54bc5f9311b0d069399bee6a2f433d3a7d00ce9faa1c4511b5920396c7","first_seen":"2025-05-29T18:51:29.056319Z","last_seen":"2026-05-22T17:07:02.073406Z","times_seen":3210,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":50,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/InitFormData?msn=3\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454273","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:49.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/InitFormData?msn=3\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454273 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 1961\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:49 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrguserid=9ee95140-4317-4495-8995-75fbb259a983; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:49 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=12\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454282","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:57.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=12\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454282 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 21681\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:57 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:57 GMT; Max-Age=2592000; path=/\nrguserid=d2232d6b-dcb7-4a38-91fd-38796f2d136e; expires=Sat, 15 Nov 2025 12:22:57 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:57 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:57 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=5\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454275","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:54.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=5\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454275 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 239407\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguserid=f8925ac7-2c2e-48dc-8097-bdffd0193975; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":0,"dns":0,"connect":0,"send":94,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lrkt-in.com/logger-1.min.js","fqdn":"cdn.lrkt-in.com","domain":"lrkt-in.com","tld":"com"},"ip":{"addr":"104.21.13.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lrkt-in.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 19:10:55 GMT","end":"Tue, 13 Jan 2026 20:08:40 GMT"},"fingerprint":{"sha1":"90:16:9E:CC:A3:C3:2B:BA:91:D2:C6:A1:A5:18:43:F5:2C:AF:0E:85","sha256":"01:FA:2C:C1:BB:67:77:90:03:86:81:24:0E:D4:D3:C3:A6:F5:F7:BD:E2:35:AD:25:FE:E6:E8:D2:5C:85:19:2C"}}},"request":{"raw":"GET /logger-1.min.js HTTP/1.1\r\nHost: cdn.lrkt-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\netag: \"4e8930d00f851e742c3e8305328d47e7029a98600c71f6c9c508e2a8923fc893-br\"\r\nlast-modified: Wed, 15 Oct 2025 20:55:26 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\nx-served-by: cache-bma-essb1270034-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1760564318.072590,VS0,VE141\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 148928\r\nage: 9846\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ar297yFigZvIqDl%2F8LQ8WzG1PNyREiPp3OKI2H8mtoZqJ2qs4FfewzhqYIFWmqNxsAmoInFHUDh0FtJjPwuwD8DIUBkaUeHkdiT1GRc%3D\"}]}\r\ncf-ray: 98f78614b8a656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":913125,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e1d77229650875697415547c984b40a0","sha1":"00fdddf890eadf8ebb2620c718f14fde786fa8b3","sha256":"d45290fbecc218fbe3c3075b1591398f51d8d52411fa2dcf9ae1f61ac562a2d3","sha512":"a8fcbf591c86c1bed39dbdf17501361fb72e7772fea21ee84cb43abcb5735390e6c20eadeac92dee0363f275ec3a22e6a392b6d71009327f59bff70c2caee4f6","ssdeep":"12288:viEhVxoXUrKVoA3hx86xKLaMk8Y8JxcCnHtTZ3HY5ITQY:Dmd6xcCnHtV3HY5ITZ","tlshash":"1a152b887a99f06203e790e4503f240bf276281d546de0e0f3a6ddd5b86d68e517bf3a","first_seen":"2025-10-15T23:35:11.411721Z","last_seen":"2026-05-12T06:31:45.82272Z","times_seen":36,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 17:23:00 GMT\r\nexpires: Thu, 15 Oct 2026 17:23:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 68387\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-22T17:18:22.316284Z","times_seen":190362,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/fingerprints","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:49.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/fingerprints HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 176\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:49 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=11\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454281","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:56.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=11\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454281 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 20915\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:56 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:56 GMT; Max-Age=2592000; path=/\nrguserid=9f591974-ddb8-42cb-9eb0-6275db8262e8; expires=Sat, 15 Nov 2025 12:22:56 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:56 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:56 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 12:22:47 GMT\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26546,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f6421078fefe84ff30820378038f294e","sha1":"70de74efc09e27b9976c50a0d34178f2c7d4f8ca","sha256":"245ca13e224c772a1109ce4428d21518f3699e27ad084698a244f74cb2bbe4b2","sha512":"a5f26adfdbadeaf9dc3a03a074b7dcddfd4bf900d2e68c7e612eb544303fbba2a91878f5228fac5ac97a89dddd7c9faf0b552759a998d5a0e99359f3717e60a5","ssdeep":"384:vtfcHjg8ciI53w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:dEA3mkX","tlshash":"bbc29992087ba114ab871cc123cf7d36ee4ea254b450e578abfd1cd8ad9bc66037172d","first_seen":"2025-09-19T04:51:50.953912Z","last_seen":"2026-05-22T11:23:51.648856Z","times_seen":809,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":158,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/c.noodledit.com/ui/cart.svg","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:44:53 GMT","end":"Mon, 15 Dec 2025 08:44:52 GMT"},"fingerprint":{"sha1":"CE:A3:CB:18:91:F6:8D:A5:0D:D6:11:1B:0C:0D:0F:5C:68:B1:53:44","sha256":"A6:31:5D:47:91:DC:EF:C6:B5:2B:56:CC:53:05:87:3A:86:34:93:3F:93:E5:61:1B:9A:D7:7C:E4:85:79:FE:CD"}}},"request":{"raw":"GET /c.noodledit.com/ui/cart.svg HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3Lpb45Q3xbXbFj8R2bvjt943YMN3AmRR4SRahLAWXAZVtDfvpjxf4YK_a3gf51YlVWlY_cxzno\r\nx-goog-generation: 1750175673846028\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2224\r\nx-goog-hash: crc32c=LAgIbA==, md5=U26/YE4xH/Sy0LTkBlKnlw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2224\r\nserver: UploadServer\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\nexpires: Thu, 16 Oct 2025 13:22:48 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 17 Jun 2025 15:54:33 GMT\r\netag: \"536ebf604e311ff4b2d0b4e40652a797\"\r\ncontent-type: image/svg+xml\r\nage: 1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2224,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"536ebf604e311ff4b2d0b4e40652a797","sha1":"ae20cb24fe1ec0dc204bb9d5139fd7f49fb86bd8","sha256":"71577ff56703b3875916a87a84170b2a83f4b2e27a41a81995cb92a5ef7b80ac","sha512":"3bf020600791e3f2054a9a114d20cbce8d3de9d242936af6d204c7fffcfa2e52edc18a1770acf73177a6e0d424d70600baf926e8dddb81a32a7bdbdb18baae53","ssdeep":"","tlshash":"804165a022c8c3c88a0597a0b70268ba707bf8f53b25db9483455e59782d09e989c15a","first_seen":"2025-08-23T14:17:12.804488Z","last_seen":"2025-12-04T03:23:49.75165Z","times_seen":5,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":90,"dns":59,"connect":9,"send":0,"wait":136,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=15\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454285","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:00.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=15\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454285 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 23865\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:23:00 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:23:00 GMT; Max-Age=2592000; path=/\nrguserid=c4bc2663-5d64-401b-aff9-bd397862e932; expires=Sat, 15 Nov 2025 12:23:00 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:23:00 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:23:00 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:01.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 511\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:23:01 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 00:01:44 GMT\r\nexpires: Thu, 15 Oct 2026 00:01:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130863\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-22T17:19:46.962342Z","times_seen":246846,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":165,"dns":1,"connect":27,"send":0,"wait":38,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 09:05:50 GMT\r\nexpires: Thu, 15 Oct 2026 09:05:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 98217\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-05-22T17:07:02.072943Z","times_seen":23815,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":117,"dns":6,"connect":15,"send":0,"wait":69,"receive":13,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/?address1=\u0026address2=\u0026c=15552\u0026campaignid=7\u0026city=\u0026dob=\u0026email=\u0026first_name=\u0026gender=\u0026last_name=\u0026phone=\u0026sid1=462\u0026sid2=\u0026sid3=ff08c61015c7460cb1cc59f7ff2e9bee\u0026sid4=\u0026sid5=\u0026state=\u0026transaction_id=37bc817b2b334b60bfba91fcbb52a162\u0026zip=","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T12:22:46.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myeverydaysurge.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Sep 2025 01:16:14 GMT","end":"Sat, 20 Dec 2025 02:00:20 GMT"},"fingerprint":{"sha1":"2A:5A:2D:17:2D:C4:F4:72:20:59:D6:01:3D:90:01:F4:0F:CD:68:FA","sha256":"00:B8:79:63:76:3C:BB:14:D7:C2:6C:E8:05:2D:F3:76:3D:A7:4C:9A:DF:27:4D:57:29:95:56:A6:5D:12:44:9E"}}},"request":{"raw":"GET /?address1=\u0026address2=\u0026c=15552\u0026campaignid=7\u0026city=\u0026dob=\u0026email=\u0026first_name=\u0026gender=\u0026last_name=\u0026phone=\u0026sid1=462\u0026sid2=\u0026sid3=ff08c61015c7460cb1cc59f7ff2e9bee\u0026sid4=\u0026sid5=\u0026state=\u0026transaction_id=37bc817b2b334b60bfba91fcbb52a162\u0026zip= HTTP/1.1\r\nHost: 16.myeverydaysurge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84\r\nset-cookie: _session=85e22e56-2fd9-42b7-8db3-369f9fdc4b84; Expires=Fri, 17 Oct 2025 12:22:46 GMT\r\nx-content-type-options: nosniff\r\nx-correlation-id: 257f9706-cbca-45d2-a0c7-979b24bd625f\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cloud-trace-context: 66685aa2f8e6e559ccd2cc4d09dc3e81\r\ndate: Thu, 16 Oct 2025 12:22:46 GMT\r\ncontent-type: text/html\r\nserver: Google Frontend\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":59875,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 17:23:00 GMT\r\nexpires: Thu, 15 Oct 2026 17:23:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 68387\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-22T17:18:22.316284Z","times_seen":190362,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:02.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 423\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:23:02 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 00:03:13 GMT\r\nexpires: Thu, 15 Oct 2026 00:03:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130774\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-22T17:19:46.939936Z","times_seen":231464,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:49.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 631\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 201 Created\r\ndate: Thu, 16 Oct 2025 12:22:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 497\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":497,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"242d92d6a89f02476148081a607972c4","sha1":"19eed73580569581f633f1747933f9d8b0a8d518","sha256":"9f4d1a529b8656773dde1756c9d6ef358e39df5a83cf64827724ef7b4f2d038f","sha512":"3b24d68243da86dfd784df660738317c04250dfe8db366c08a5d439f77571af2da4a8bbc086537b2be95e6891a7b597b53fb867992d440b11364367de947df30","ssdeep":"","tlshash":"c9f05c5dcb1234759edc955e6d84f1346074758b08035f4d377346378873c51171448e","first_seen":"2025-10-16T12:23:18.037902Z","last_seen":"2025-10-16T12:23:18.037902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":191,"dns":1,"connect":93,"send":0,"wait":97,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2m2wsoho8qq12.cloudfront.net/iframe.html?token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.19.1\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320","fqdn":"d2m2wsoho8qq12.cloudfront.net","domain":"d2m2wsoho8qq12.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:49.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /iframe.html?token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026apiurl=https%3A%2F%2Fcreate.leadid.com%2F2.19.1\u0026lck=166E56D8-F98C-DFC4-C352-B05074F47B54\u0026lac=9F3784C7-6949-6299-8003-1FE5AA121320 HTTP/1.1\r\nHost: d2m2wsoho8qq12.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: ALLOWALL\r\nContent-Encoding: gzip\r\nServer: nginx\r\nLast-Modified: Thu, 18 Sep 2025 14:09:40 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nDate: Thu, 16 Oct 2025 02:50:39 GMT\r\nEtag: W/\"68cc12a4-1150\"\r\nVia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nAge: 34330\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Origin: *\r\nX-Cache: Hit from cloudfront\r\nX-Amz-Cf-Pop: OSL50-P1\r\nX-Amz-Cf-Id: bl4_Supxj489agM7i-4LqHPnsAVw6dSDeAEazgsp2NPs19qtIJRAKA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4432,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"dca8788f1fe138d6347116e93c8e02f8","sha1":"1ebfe2854273a3e298ab7418633c8739557ba7c1","sha256":"ff1c40411a21fbc887b703f0a08980f0aeeec40977745d1f1a9d55c016906497","sha512":"74e8dd7de3ede283a2cd6c589b5d982dedd3dd8dcad65ee0e35409ea2262cf0bd313a2c293f315ed56aafa3d947f3ed7185a66acbf5919e7bfddc221b1ba375a","ssdeep":"96:LJQSXFTLUfavexihhUuw9PCTDsaiqPh23qIanLM/ws1vfQ:LJQSVTwfaJhSuwETDsaiuh23qIanLGv4","tlshash":"11914f047ce721e5297330bc06af5094e6b892172424ca68bc9cb7a05f90f355abf6ed","first_seen":"2025-08-08T17:22:11.81474Z","last_seen":"2026-05-22T16:56:21.288907Z","times_seen":3055,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":31,"dns":24,"connect":1,"send":0,"wait":3,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:58.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 418\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:58 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sassets.noodledit.com/pages/logo_mydailysurge.svg","fqdn":"sassets.noodledit.com","domain":"noodledit.com","tld":"com"},"ip":{"addr":"104.21.50.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noodledit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:10:19 GMT","end":"Tue, 06 Jan 2026 16:09:03 GMT"},"fingerprint":{"sha1":"74:E6:6F:7F:4B:81:D2:8F:1E:06:F8:5A:43:F7:59:AA:37:6A:22:D5","sha256":"29:BD:B8:A2:47:4A:B2:B8:ED:70:B8:3A:5A:4C:0D:8A:DA:91:22:20:F9:41:06:AA:55:D2:AD:90:54:87:DE:36"}}},"request":{"raw":"GET /pages/logo_mydailysurge.svg HTTP/1.1\r\nHost: sassets.noodledit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\ncontent-type: image/svg+xml\r\nx-guploader-uploadid: AAwnv3KjhrMC8BDPUM3zqB7gUbPE_QL4aUceD3fMvA-J19eEWGmZaC-SiQ_n49QgqVWPKs2N\r\nx-goog-generation: 1744814065128868\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 11079\r\nx-goog-hash: crc32c=ZVbH0A==, md5=u3VoWfSquYHk6HlUUdL6eQ==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8yX9yew%2Bclm4g7gZKK2dVM38KaKEkKe6LEzZifWoCD%2FJbUMkRFUZEQw02%2F1Mrg%2BppnwwQgv9nWkpXbsM%2FSuJWLRZVtQ%2BikMqE3vY8Z6bq9GMUFxFw%3D%3D\"}]}\r\nserver: cloudflare\r\nexpires: Thu, 16 Oct 2025 13:22:48 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 16 Apr 2025 14:34:25 GMT\r\nvary: accept-encoding\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bb756859f4aab981e4e8795451d2fa79\"\r\ncontent-encoding: br\r\ncf-ray: 98f7861388eac272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11079,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb756859f4aab981e4e8795451d2fa79","sha1":"09532356a526addfb0c78417eab54e4a7a21621d","sha256":"932d6000c281df5efec95218e75e5882acaa6e80f2340f515bda280c1ed4a41e","sha512":"1b294baf8a7d7bef85bc4ee534a818aa6c3a643730043dd3d36132ad0aa5e82ba59e99d8b493d0254b67a0082b845ccbfe1ec0dfa52cfaa92a2318a625c31439","ssdeep":"192:37C/2jLPaPRfep8cdE9JiVhtOMJg1VJ6EIFlHhXgEi1KHn61Dhszg/mbFB:37C7s8cuiTtmHJjIFlH1KKHnEDhsztz","tlshash":"923272e11792b3e0bc46f3acc83229c4ba5f24f6b7d4d56ac250ec94e61119c8d5edc6","first_seen":"2025-06-27T15:33:18.021903Z","last_seen":"2026-05-05T23:01:37.405745Z","times_seen":16,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":175,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 00:01:44 GMT\r\nexpires: Thu, 15 Oct 2026 00:01:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130863\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-22T17:19:46.962342Z","times_seen":246846,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/c.noodledit.com/ui/icon_treasure_blue.svg","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.123","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:44:53 GMT","end":"Mon, 15 Dec 2025 08:44:52 GMT"},"fingerprint":{"sha1":"CE:A3:CB:18:91:F6:8D:A5:0D:D6:11:1B:0C:0D:0F:5C:68:B1:53:44","sha256":"A6:31:5D:47:91:DC:EF:C6:B5:2B:56:CC:53:05:87:3A:86:34:93:3F:93:E5:61:1B:9A:D7:7C:E4:85:79:FE:CD"}}},"request":{"raw":"GET /c.noodledit.com/ui/icon_treasure_blue.svg HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3Is8S70u9ZAv_Qx2G-Cx5LYWJIc3dBtA2rlYyJxGFd0qer7uDsaDWSutI6Rbu9_HG9illq_2tg\r\nx-goog-generation: 1748372684595804\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 15680\r\nx-goog-hash: crc32c=K91WWQ==, md5=rVUohxyT0SKauQf3S21qvQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 15680\r\nserver: UploadServer\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\nexpires: Thu, 16 Oct 2025 13:22:48 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 27 May 2025 19:04:44 GMT\r\netag: \"ad5528871c93d1229ab907f74b6d6abd\"\r\ncontent-type: image/svg+xml\r\nage: 1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15680,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad5528871c93d1229ab907f74b6d6abd","sha1":"3a0545b68c9c0eed34c5b051d19968ead3049c8b","sha256":"43725e3c01d95398fed47b8fde093ed460ac09790e4558276ffa975271fbe541","sha512":"8be120ea73aeaf80210e1be4d1cec2fd6a96563975351e1a7c9c9608fc6e17dc70327cea312c5a42fceb81822e34f5eadd7ef73065f217e8fd9ff56a05d8dcc4","ssdeep":"384:lyheflceflVIJh9/Ftnc77do0RY+M0pxGLUHPHIF+8W:lOKcKVa9/Ftc/2gGovoy","tlshash":"37620189f3a9e1b8f905fa7c82a3243725190dfd6b31c097e7536817a1f429c45acc97","first_seen":"2025-10-16T12:23:18.050576Z","last_seen":"2026-05-05T23:01:37.442744Z","times_seen":12,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":103,"dns":53,"connect":11,"send":0,"wait":132,"receive":2,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=8\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454278","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:54.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=8\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454278 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 18728\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguserid=86b3b4f4-1c47-4146-94d3-90fc1208b6e4; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:54 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":56,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:00.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 419\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:23:00 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/Snap?msn=17\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454287","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:02.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/Snap?msn=17\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026token=1741B73B-BD60-1962-EA49-127A705ADF3C\u0026_=123454287 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 25321\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:23:02 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:23:02 GMT; Max-Age=2592000; path=/\nrguserid=9996c556-e979-442c-b9fe-52523532d0d1; expires=Sat, 15 Nov 2025 12:23:02 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:23:02 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:23:02 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:23:04.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 423\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:23:04 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 09:05:50 GMT\r\nexpires: Thu, 15 Oct 2026 09:05:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 98217\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-05-22T17:07:02.072943Z","times_seen":23815,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":71,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustedform.com/bootstrap.js?field=xxTrustedFormCertUrl\u0026ping_field=xxTrustedFormPingUrl\u0026l=17606173677580.3889037684102882","fqdn":"cdn.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"3.167.2.111","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 13 Jan 2025 00:00:00 GMT","end":"Tue, 10 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:54:2A:17:15:5E:25:8E:83:28:1E:11:46:BC:0D:35:08:6E:B5:44","sha256":"D9:BF:A7:21:D0:CC:C5:30:96:23:75:3E:EB:A8:D3:29:C6:80:7E:94:A4:29:D1:19:E1:44:9C:74:19:07:4C:45"}}},"request":{"raw":"GET /bootstrap.js?field=xxTrustedFormCertUrl\u0026ping_field=xxTrustedFormPingUrl\u0026l=17606173677580.3889037684102882 HTTP/1.1\r\nHost: cdn.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://16.myeverydaysurge.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 16 Oct 2025 12:22:49 GMT\r\nlast-modified: Thu, 04 Sep 2025 14:41:14 GMT\r\nx-amz-version-id: FoCNWdyECzkzqu.vJ6AOyPV.q3SuxwVQ\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\netag: W/\"9453474618f318416b603bc3e9596fe3\"\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bb7e95405d9101d4320e2582fcead450.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: oeo7pS7aNAKNCfPW1mwVXw90_RKDue-funnNpjZQClysoBDFpA2oHQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19882)","md5":"9453474618f318416b603bc3e9596fe3","sha1":"e8d101d4ba45b6a1160e1a98754e339eec2e525b","sha256":"e2bb6abb3d8b6e283de6cdaef9c960534c1087bdbc3c384a41f65e6b73ca5eb2","sha512":"a811e6f011cc30b1a3fd33d073eff398c4b42b7e3987beb11ed9aef9b400ef8e2ca18884c9319e3ea802ef783f5055b808c1f2a5e39dcb74d674654e9f2199b7","ssdeep":"384:uJ5BLkGVfK5k/QoJ69cdlYo4kVW1Wk0PfTKoT2VUSoxs7iy7fSagpLp6bU:uJ5BgUfK5YX69cdlYo4kVW1Wk0PfTKoR","tlshash":"c5921a4ab698b43d0b6721f2a13f920bf3712535390b90504269c9f43e79d8f961bf9e","first_seen":"2025-09-04T19:11:50.669457Z","last_seen":"2025-10-17T15:33:23.29133Z","times_seen":536,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":140,"dns":29,"connect":2,"send":0,"wait":136,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"create.leadid.com/2.19.1/GenerateToken?msn=1\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026_=123454271","fqdn":"create.leadid.com","domain":"leadid.com","tld":"com"},"ip":{"addr":"98.90.233.189","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:48.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"create.leadid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 20 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:49:A8:FE:13:C8:23:12:18:28:7D:41:12:8E:B6:2E:68:71:B0:49","sha256":"AE:0B:38:70:C7:E6:52:73:01:DE:6D:07:98:F9:13:06:57:AE:D3:3A:3C:30:EE:F4:22:1C:19:13:75:F3:FF:47"}}},"request":{"raw":"POST /2.19.1/GenerateToken?msn=1\u0026pid=9a008ce0-3c8a-4740-b48d-508f05b25370\u0026_=123454271 HTTP/1.1\r\nHost: create.leadid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 227\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 12:22:48 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: nginx\r\nset-cookie: rgisanonymous=false; expires=Sat, 15 Nov 2025 12:22:48 GMT; Max-Age=2592000; path=/\nrguserid=b6acc059-1462-411d-b954-832eada8fe01; expires=Sat, 15 Nov 2025 12:22:48 GMT; Max-Age=2592000; path=/\nrguuid=true; expires=Sat, 15 Nov 2025 12:22:48 GMT; Max-Age=2592000; path=/\nrgisanonymous=true; expires=Sat, 15 Nov 2025 12:22:48 GMT; Max-Age=2592000; path=/\r\ncache-control: no-cache, must-revalidate\r\nexpires: Sat, 26 Jul 1997 05:00:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"37d945e40675be2b7c67d386f6bf0ffc","sha1":"92af879fdca693f0d47c3f997aca4457df23358b","sha256":"511bba8fd9e23a7d122c7c5478045b57fd23b5e6d679a4c47f5c974389903d82","sha512":"f51db6c5b668b3153ac46f024d959c7ae9dc559eb416f7ca08ae299b4be73aef391b9fe37c68b4d27df52b4d65437216570af855a42db0ed815668f362615a5a","ssdeep":"","tlshash":"478004410001454d401c5314114301ff41044071107d5515c0d735415c13150010d131","first_seen":"2025-10-16T12:23:18.056641Z","last_seen":"2025-10-16T12:23:18.056641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":290,"dns":22,"connect":95,"send":0,"wait":151,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustedform.com/trustedform-1.10.25.js","fqdn":"cdn.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"3.167.2.111","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:49.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 13 Jan 2025 00:00:00 GMT","end":"Tue, 10 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:54:2A:17:15:5E:25:8E:83:28:1E:11:46:BC:0D:35:08:6E:B5:44","sha256":"D9:BF:A7:21:D0:CC:C5:30:96:23:75:3E:EB:A8:D3:29:C6:80:7E:94:A4:29:D1:19:E1:44:9C:74:19:07:4C:45"}}},"request":{"raw":"GET /trustedform-1.10.25.js HTTP/1.1\r\nHost: cdn.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Sep 2025 14:41:14 GMT\r\nx-amz-version-id: AmLFyJNnccYlNZqs8qWf.SyBQOyH0GkT\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Thu, 16 Oct 2025 12:22:36 GMT\r\netag: W/\"ca5dfa48d2653868509a325f3f0ea31d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb7e95405d9101d4320e2582fcead450.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: qJv2uFD1B3Pm1uEpdgQfmKeeTh7_140tpADrv8SmHs_kdzlFWkPOBg==\r\nage: 18\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":111192,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ca5dfa48d2653868509a325f3f0ea31d","sha1":"188c055bfe368451b3962289a942c7dfe3af47d2","sha256":"437bbfb0fa93820e9debdc03d6f435ae326c40f36a37744c926f82ad0ee80508","sha512":"9739362424e3a74ee7dbc34f7a42b6bb9597491c251b50aa881c613e6148f6e3bf0e6021f9c18f67d3e9b8184f534d2b719a80dc360175f54d2be36a30bc4b68","ssdeep":"1536:/f6y5/t6L3StlSx/zVXh5HE3AaSkyY2cjTHfVsywC:/f6q/zSxzVxmAagjcjZsy7","tlshash":"03b318cc77c6b07b0ba370b1416f514bb23a6915288ea451d215f8e43c7894fa63bfad","first_seen":"2025-09-04T19:11:50.654893Z","last_seen":"2025-11-06T15:34:22.960181Z","times_seen":537,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:57.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 418\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:57 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Inter:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Inter:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 12:22:47 GMT\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50562,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6cafe0e3e01c461bcdb7e85c3b101982","sha1":"3cf91a08e628db944c4235ac452b83baaeb3ef0d","sha256":"5d72b57554dc3fb4e97d887ef790c355f2d10d51f5bf5ebe686e12f0f987a094","sha512":"d879b7b813ebddbb3a20b3701180e7306d5938e596568cb885446f9758c44de916d527f3ca2c0ccb22b4c5859bbb69301423b60ab34f84449c86952aa8ff2647","ssdeep":"384:vtfcHjg8cK3nf353s3Lg3Y3X3xOfQRUgvM2Rf3yJgaBfofefygBu0DftwHgM7V6w:iP1AwsHLSXokZIj","tlshash":"9733cc92002fe500aa931dc233cf7e3aadce11a96486d5b95ffd0cc96cdad27126875d","first_seen":"2025-10-16T12:23:18.065287Z","last_seen":"2026-05-16T15:38:38.510199Z","times_seen":43,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":225,"dns":0,"connect":28,"send":0,"wait":45,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16.myeverydaysurge.com/i?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84\u0026ts=f6dad214-2573-41e9-b2e8-72910ae2af44\u0026si=s\u0026sai=a\u0026sji=j\u0026sti=t\u0026ssi=s\u0026spi=p","fqdn":"16.myeverydaysurge.com","domain":"myeverydaysurge.com","tld":"com"},"ip":{"addr":"34.49.199.55","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myeverydaysurge.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Sep 2025 01:16:14 GMT","end":"Sat, 20 Dec 2025 02:00:20 GMT"},"fingerprint":{"sha1":"2A:5A:2D:17:2D:C4:F4:72:20:59:D6:01:3D:90:01:F4:0F:CD:68:FA","sha256":"00:B8:79:63:76:3C:BB:14:D7:C2:6C:E8:05:2D:F3:76:3D:A7:4C:9A:DF:27:4D:57:29:95:56:A6:5D:12:44:9E"}}},"request":{"raw":"GET /i?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84\u0026ts=f6dad214-2573-41e9-b2e8-72910ae2af44\u0026si=s\u0026sai=a\u0026sji=j\u0026sti=t\u0026ssi=s\u0026spi=p HTTP/1.1\r\nHost: 16.myeverydaysurge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84\r\nCookie: _session=85e22e56-2fd9-42b7-8db3-369f9fdc4b84\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\nx-correlation-id: 41d25b6a-4f6f-40ed-8e6d-e6aea2468f8a\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-cloud-trace-context: 3efa71e9a444e2addd72da6d51c9bbac\r\ndate: Thu, 16 Oct 2025 12:22:47 GMT\r\nserver: Google Frontend\r\ncontent-length: 68\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":68,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced","md5":"138a5331fcad1d5d830d627cf02a38e5","sha1":"c68daea4e25d29ba5ceaa8f24586d1c58e3fd8b9","sha256":"e13aa3622e6c251da7c8761e7d7e45c260b53a602bfb5fa1eac59bede95c9676","sha512":"96881d03d8de2328af24a3a6039f09b8dc7895df3ccfd2efa80bcc8f032a4c08e0aaae9af3b6c71ca2022b25453141f43dda93d02433d70427c183fd88952b5a","ssdeep":"","tlshash":"24a022e2a3808c3cc3ae2033c2200238fe30000308030c8c8002e028ace32b0088c282","first_seen":"2025-10-16T12:23:18.070283Z","last_seen":"2026-05-16T15:38:38.524205Z","times_seen":43,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-ng.pushy-js.com/scripts/v1/pushnami-adv/6890bea98c1f1c0015d31478","fqdn":"api-ng.pushy-js.com","domain":"pushy-js.com","tld":"com"},"ip":{"addr":"54.240.174.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:47.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pushy-js.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Tue, 11 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:9F:28:4D:E3:05:AD:F6:2E:E8:70:64:64:A9:3C:7B:72:B2:80:F1","sha256":"90:EE:B8:49:74:B1:C4:2C:97:22:11:23:63:A7:E7:D2:CC:8D:D7:BE:AC:B7:A7:0F:AB:9B:83:FD:74:A5:80:DA"}}},"request":{"raw":"GET /scripts/v1/pushnami-adv/6890bea98c1f1c0015d31478 HTTP/1.1\r\nHost: api-ng.pushy-js.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 12:20:27 GMT\r\naccess-control-expose-headers: Content-Length,Content-Range,Access-Control-Allow-Origin\r\naccess-control-max-age: 1728000\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Key\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jIEIHpwQxSV9s3pz7LkFqwScozIeA0zXRgP-JQ99VNMlWzfpqcfcDQ==\r\nage: 140\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":102444,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (533)","md5":"ad57c574c663326ea083cde7d855c13d","sha1":"411c83380512cda44ac647d5486fd3072b5c1749","sha256":"7e089c468bbe103130d8e8af092020c770c7f5141dc6372442acb710d0fad1fb","sha512":"d00e5ea17032f6337f2c0f0a6963bd5b395075565494c20f422c06991fb4b182047854ba61ed1c693c8a9db4919d2ebce850d352cd14c11bc9208b15a293bbac","ssdeep":"768:iF9EXvd7snMM+eOwhJlQNmMpNvetoNLXDV7C7EjANEw7Lx3N5K9c71mpZ+TOG/CQ:MuF7snrlBuzqoNLXDV7C7RNbhdU9gmj6","tlshash":"d1a3a55f9ce330342aa7713d4fafa418723690036519d910bfcd8b80af9962d46b6bdd","first_seen":"2025-10-16T12:23:18.075331Z","last_seen":"2025-10-16T12:23:18.075331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":35,"connect":4,"send":0,"wait":24,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustedform.com/certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events","fqdn":"api.trustedform.com","domain":"trustedform.com","tld":"com"},"ip":{"addr":"34.196.187.67","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://16.myeverydaysurge.com/journey?s=85e22e56-2fd9-42b7-8db3-369f9fdc4b84","date":"2025-10-16T12:22:50.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustedform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 08 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:AB:43:B1:B0:8A:50:79:5D:75:F8:50:2E:87:D1:61:C3:A5:FC:9E","sha256":"09:8E:30:0B:F3:24:44:6F:55:46:4A:1B:16:24:36:37:D9:D0:35:CF:AA:A7:BE:E0:F9:A9:69:8B:64:53:7F:D3"}}},"request":{"raw":"POST /certs/ff5460c81b06437aa4d5c8fbcfdce5df33215e25/events HTTP/1.1\r\nHost: api.trustedform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 438\r\nOrigin: https://16.myeverydaysurge.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://16.myeverydaysurge.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 16 Oct 2025 12:22:50 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-22T17:19:51.364304Z","times_seen":15564649,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}