{"report_id":"a7620285-0015-467b-b4be-e9a206356033","version":6,"status":"done","tags":[],"date":"2026-02-28T15:23:59Z","url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/index.html","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":0,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"final":{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/index.html","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"title":"Internet Banking","dom":{"size":459610,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27714)","md5":"b6f428c795033b091832cbb086ff685c","sha1":"441ec4db6c6a638742347d9728b4df53c292fb24","sha256":"aaa87e6a37b227dd282ea86b6cd2d05d3c9f47977e33aa71961055be97994450","sha512":"a25c809e7a0552c4eee23e4384b9a4f922f32fb75c67234a49157f99640941354234a7cf8c905249a36d0236f67c79adfc31d01c1890bf96e47913d65f42bce9","ssdeep":"6144:AuXQeYX4Zq1cuvhbcoBnTQbD4GGJGulTk1U/ojSrU9QLH+0294Ior/wepnbgKhs1:/OHPH/wepnXa667","tlshash":"50a478c910602288e04a766e97affed0162f309bb10149053bafd6dcab5e595ffd907c","dom_hash":"domhashcc1d9ad8173a9d21324578c70221a059","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/index.html","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":0,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-04T15:23:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"babyroom2024.dev.siter.kz","ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"domain_registered":"2006-02-26","domain_rank":0,"first_seen":"2026-02-28T15:24:00.794637Z","last_seen":"2026-02-28T15:24:00.794637Z","alert_count":0,"request_count":6,"received_data":841820,"sent_data":3193,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"localhost","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-13T02:33:42.572698Z","last_seen":"2026-02-23T08:35:01.539072Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":397,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-22T22:27:51.54973Z","alert_count":0,"request_count":3,"received_data":219351,"sent_data":1396,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"login-and-registration.ib.apps.virginmoney.com","ip":{"addr":"81.128.241.72","port":443,"asn":2856,"as":"British Telecommunications PLC","country":"United Kingdom","country_code":"GB"},"domain_registered":"1998-08-26","domain_rank":756986,"first_seen":"2026-02-28T15:24:00.798439Z","last_seen":"2026-02-28T15:24:00.798439Z","alert_count":0,"request_count":4,"received_data":45106,"sent_data":2008,"comment":"","tags":null,"fingerprints":[{"name":"Azure Edge Network","description":"Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager.","website":"https://learn.microsoft.com/en-us/azure/cdn/cdn-overview","common_platform_enumeration":"","icon":"Azure.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.w3schools.com","ip":{"addr":"2.23.13.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2000-03-21","domain_rank":2135,"first_seen":"2014-02-05T20:15:46Z","last_seen":"2026-02-25T15:16:51.657114Z","alert_count":0,"request_count":1,"received_data":24014,"sent_data":444,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/index.html","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"7effe7b608e1830b1f1cddca97d5c47f","sha1":"0cd23395e22554c18c32b64a4cf22489e45c7de3","sha256":"7d69dd6977fdab7143ef9cd7598171e6727b8ac4017efc141dcdd87d73fed431","sha512":"fd0123eb774eed444c166fe286eb0d1c93b3a5ea12a296e2e1b8f177cd8983fde457cfcf784631aa25958b0e51ee56332a60e03c3f357624b8a563cf69931a80","ssdeep":"","tlshash":"d141e15c6ea439c19b8aabfa747a60dcf4999c480fc1400fb61364a0fe91919f6d2732","size":2241,"data":"","first_seen":"2026-02-28T15:24:08.3798Z","last_seen":"2026-02-28T15:24:08.3798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T13:47:59.453643Z","times_seen":60599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/index.html","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f33206f0847d4768ef04476e144cd5b","sha1":"0c9d2515c0f3a64ff430b6e6aaadcdb903107115","sha256":"972ab9fd4ec48e645d9df2b1b6fc835d8234185c9ea4b39561fc78feb9e65ee6","sha512":"754d238da3e12c64827f3b4006f2f7457aa4f2ff92ca21e761cb6d5ba451517f34cd6772e6e5ee4a81d3d724ea032c2758ea1b2ce834abde56481f7026543ee3","ssdeep":"","tlshash":"5c216850e8a0a8489b5801b962653b5f024318bacc8ae88c753ce7644f9d50350a5bd0","size":1338,"data":"","first_seen":"2026-02-28T15:24:08.385778Z","last_seen":"2026-02-28T15:24:08.385778Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/index.html","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f027e40c922fce924cb9fd226a1ca76d","sha1":"c6e0e1fa14e940a87ec75ae15171d28f8de2bb52","sha256":"5492cfff9859489f0792d028980253ee54bb2a2c442ccf8123de14ec3830bc2a","sha512":"ccca79b2955e0fa8489f7fe484afc4d5760de0ab67ff9fb6e6990d94a502b0427c7eaf848773b9d65c699d0546653930552a78e8fb6a41cf34d096621e458bc4","ssdeep":"192:48uzq1cU+FMb9j0FpMpMJV9FX/tjH3M5Y1skubjHpkY1skuC:4C1cU+FMb9j0FpMpMX9FXVjH3Mi1sxjD","tlshash":"d202ff0ce8b1225161b3f17a1bff99082239111bd106cf047e0c4be58fa9a3eb966ddd","size":8685,"data":"","first_seen":"2026-02-28T15:24:08.388557Z","last_seen":"2026-02-28T15:24:08.388557Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T13:47:59.453643Z","times_seen":60599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/index.html","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c65018631b4ba3011910622cf8c0a945","sha1":"80eaa9816462b6687b99e667c5dc83c6b4536e9e","sha256":"aec9ea2ca4e7d978468546a86bfeafc8bc71305ba7ee81d2e428c2311cc494f6","sha512":"c204a8ef44dc6ce3a2cc329166b86971235766cd61cc97e022ae97c492103f9c6d74190fbef6b2322ed56a43b210340c20446378e22a426f8392c6033e3131d0","ssdeep":"1536:AlLeqgZzp3u/Y7bguat2h+4W3DmdIy3Dz+SM0:wuzpnbgKhs66qh","tlshash":"f383f38de5d068c9134a9a3733d739a0d12b0b9cf1458d46f508beb47863b6afaf1271","size":85229,"data":"","first_seen":"2026-02-28T15:24:08.393282Z","last_seen":"2026-02-28T15:24:08.393282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"e916685e6e78553c4678a657f19b88b3","sha1":"8e0363c3869fbc25c6931ddc652514098a28698e","sha256":"37293eaa78e0d6a8305a0c0666dee3ed6db47112da98c3dd4fa94194585ee3b9","sha512":"6c374d190e17f601f54e5f3dea9deea2709a84815d47b125f6cec62b47f53f6d8044464a0cd105afd4c36939e22d4887b26d7bd4662a576c630f5915685f1adb","ssdeep":"6144:DuXQeYX48q1cuvhbcoBnTQbD4GGJGulTR1U/ojSrU9QLH+0294Iot7repnbgKhsb:QOwWZ7repnXa66l","tlshash":"44a478c910602288e05a7a6e97affec0562f309bb10149053bafd2dca75e595ffd907c","size":461257,"data":"","first_seen":"2026-02-28T15:24:08.39455Z","last_seen":"2026-02-28T15:24:08.39455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/___.php?_do=layout","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:36.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babyroom2024.dev.siter.kz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 02:56:51 GMT","end":"Sun, 17 May 2026 02:56:50 GMT"},"fingerprint":{"sha1":"5D:5C:10:46:FA:28:6A:89:B2:B9:3C:BD:26:E1:AF:E3:97:7C:CC:F5","sha256":"75:D4:93:5C:3F:4D:BE:75:D5:24:B6:2B:34:13:58:DE:32:75:B0:8F:F3:3F:6C:6B:8B:2C:12:9C:FA:D2:9A:F0"}}},"request":{"raw":"POST /blog/___.php?_do=layout HTTP/1.1\r\nHost: babyroom2024.dev.siter.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://babyroom2024.dev.siter.kz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/blog/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 15:23:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461263,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (27714), with CRLF line terminators","md5":"43fddd19a5d0d99745b15d21b87041a0","sha1":"f74496b1d59f59a7ef69b5bba387401be5ffa4dc","sha256":"cff572b83b4a93431a097307fdd565f92318b1455976367aa67f531a52caee7b","sha512":"eb05cef956c219213346e28f9c88be6b974a3ad248a2e6b630f0b73277680d0c3009febd429ad6de8047286dee6b0d93eabe06256e6dcaeea8d698094b84f9c0","ssdeep":"6144:DuXQeYX48q1cuvhbcoBnTQbD4GGJGulTR1U/ojSrU9QLH+0294Iot7repnbgKhsN:QOwWZ7repnXa66j","tlshash":"85a478c910602288e05a7a6e97affec0562f309bb10149053bafd2dca75e595ffd907c","first_seen":"2026-02-28T15:24:08.367701Z","last_seen":"2026-02-28T15:24:08.367701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":688,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"localhost/assets/w3/css/w3.css","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.584Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/w3/css/w3.css HTTP/1.1\r\nHost: localhost\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 15:23:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 29363\r\ncf-ray: 9d50ec981eaf723c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-169d5\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 79521\r\nexpires: Thu, 18 Feb 2027 15:23:37 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kiQhFMZJbVs8gw2wrSXC6fYkmzYpbXrdDO2Qu5FCMUYcSCbgQkT4%2BZsCCs0wumHzhNDGD1dV62fmqn36ZyJUnHimEHeZtPz1CYJE6W%2F7%2B2jrX6dLHAedDErlNiZYW7GDxarmrx2p\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T13:47:59.453643Z","times_seen":60599,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/b818e3bac1b8e0d2d0c27641c164fe6d.woff2","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babyroom2024.dev.siter.kz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 02:56:51 GMT","end":"Sun, 17 May 2026 02:56:50 GMT"},"fingerprint":{"sha1":"5D:5C:10:46:FA:28:6A:89:B2:B9:3C:BD:26:E1:AF:E3:97:7C:CC:F5","sha256":"75:D4:93:5C:3F:4D:BE:75:D5:24:B6:2B:34:13:58:DE:32:75:B0:8F:F3:3F:6C:6B:8B:2C:12:9C:FA:D2:9A:F0"}}},"request":{"raw":"GET /blog/b818e3bac1b8e0d2d0c27641c164fe6d.woff2 HTTP/1.1\r\nHost: babyroom2024.dev.siter.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/blog/index.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 15:23:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 95788\r\nlast-modified: Fri, 27 Feb 2026 19:18:14 GMT\r\netag: \"69a1edf6-1762c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 95788, version 1.0","md5":"b818e3bac1b8e0d2d0c27641c164fe6d","sha1":"1c276cffbd9a2b9946202dc649c000a45016fce0","sha256":"c09f5cde27f73057311e1de51c5d952a07e6495211fc368aec4a916320cb6310","sha512":"34a513d8e4109703623226426bdc31418830d0613681ac28e5c9d08da3bbfe6b8028d22fa42736450b1b4aba62b17b8245df9b6cf3f759f05b1a19aa1ea4bf94","ssdeep":"1536:ckCF5tbc+YYIiGEHNHeQMZ+0Pe1IEBf0iqUwGxZWt4wu7nR6B2V3yyXS0BDT4e+5:AtA+Y9EHNHX0PGIECiqG7Wt4BBBi051C","tlshash":"019312dc1a124582d91a432ac4a1297df6c47f1823bdb58aec399dc8f7adc66e1c91c3","first_seen":"2023-04-14T06:59:04Z","last_seen":"2026-03-19T18:54:24.24513Z","times_seen":53,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-and-registration.ib.apps.virginmoney.com/1fd3b2aa779c8f1927bab8b8769445c4.png","fqdn":"login-and-registration.ib.apps.virginmoney.com","domain":"virginmoney.com","tld":"com"},"ip":{"addr":"81.128.241.72","port":443,"asn":2856,"as":"British Telecommunications PLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:36.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ib.apps.virginmoney.com","organization":"Clydesdale Bank PLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Wed, 25 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:49:00:F9:BA:3C:FB:07:7D:4A:FA:78:79:58:AF:AF:AF:67:F1:9C","sha256":"91:83:30:76:BC:A6:D8:41:BB:64:47:4C:56:AC:88:C3:D4:B3:39:C7:77:79:71:32:E5:B0:68:61:51:34:11:63"}}},"request":{"raw":"GET /1fd3b2aa779c8f1927bab8b8769445c4.png HTTP/1.1\r\nHost: login-and-registration.ib.apps.virginmoney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Feb 2026 15:23:37 GMT\r\nAccess-Control-Allow-Headers: \r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Methods: \r\nLast-Modified: Wed, 14 Jan 2026 13:08:23 GMT\r\nETag: \"205f-64858cd8a9fc0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 8287\r\nVary: Accept-Encoding\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"1952431743\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Security-Policy: default-src 'self'; frame-ancestors 'self' https://*.cybonline.co.uk https://*.apps.cbonline.co.uk https://*.apps.ybonline.co.uk https://*.apps.youandb.co.uk https://*.apps.virginmoney.com; frame-src 'self' https://td.doubleclick.net/ https://oc-cdn-public-gbr.azureedge.net https://tr.snapchat.com https://*.flashtalking.com https://*.adsrvr.org https://*.ib.apps.virginmoney.com https://*.apps.virginmoney.com https://*.apps.cbonline.co.uk https://*.apps.youandb.co.uk https://*.apps.ybonline.co.uk https://cybg.egain.cloud https://analytics.analytics-egain.com https://1791089.fls.doubleclick.net https://*.cbonline.co.uk https://*.ybonline.co.uk https://*.cybonline.co.uk https://*.cybservices.co.uk https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://*.youandb.co.uk blob:; child-src 'self' blob:; script-src 'self' blob: https://*.woosmap.com https://manage-personal-details.ib.apps.virginmoney.com https://oc-cdn-public-gbr.azureedge.net https://analytics.tiktok.com https://*.adsrvr.org/up_loader.1.1.0.js https://tr.snapchat.com/config/com1602abfb-0729-47a4-80ac-0af05667d4aa.js https://tr.snapchat.com/config/com/1602abfb-0729-47a4-80ac-0af05667d4aa.js https://sc-static.net/scevent.min.js https://*.flashtalking.com https://*.quantserve.com https://*.evidon.com https://mpsnare.iesnare.com https://static.ads-twitter.com https://analytics.twitter.com https://cloud-emea.analytics-egain.com https://t.contentsquare.net https://contentsquare.com 'unsafe-eval' 'unsafe-inline' https://cdn.appdynamics.com https://cybg.egain.cloud https://www.splash-screen.net https://*.we-stats.com https://www.googletagmanager.com https://analytics.analytics-egain.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://273.n.trusteer.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; script-src-elem 'self' 'unsafe-inline' https://s.pinimg.com https://ct.pinterest.com https://manage-personal-details.ib.apps.virginmoney.com https://*.woosmap.com https://analytics.tiktok.com https://sc-static.net/scevent.min.js https://tr.snapchat.com/config/com/1602abfb-0729-47a4-80ac-0af05667d4aa.js https://js.adsrvr.org/up_loader.1.1.0.js https://analytics.tiktok.com/i18n/pixel/events.js https://secure.quantserve.com/quant.js https://oc-cdn-public-gbr.azureedge.net https://*.evidon.com https://static.ads-twitter.com https://analytics.twitter.com https://mpsnare.iesnare.com https://app.contentsquare.com https://connect.facebook.net https://t.contentsquare.net https://cloud-emea.analytics-egain.com https://cdn.appdynamics.com https://cybg.egain.cloud https://www.splash-screen.net https://*.we-stats.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.analytics-egain.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; connect-src 'self' https://s.pinimg.com https://ct.pinterest.com https://app.launchdarkly.com https://events.launchdarkly.com https://api-gateway.ib-core.prd-ib.dse.ce.virginmoney.com https://unq7da76c54f24b44f8b8112d6fb1c80-crm11.omnichannelengagementhub.com/livechatconnector/v2/lcwfcsdetails/7da76c54-f24b-44f8-b811-2d6fb1c809a7 https://*.ib.api.virginmoney.com https://*.woosmap.com https://apps.cybonline.co.uk https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net/pagead/landing https://*.we-stats.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://273.n.trusteer.com https://tr.snapchat.com https://analytics.tiktok.com/api/v2/pixel https://analytics.tiktok.com/api/v2/pixel/act https://*.customers.biocatch.com https://*.cybservices.co.uk https://static-content.ib.apps.virginmoney.com https://internet-banking.ib.apps.ybonline.co.uk https://internet-banking.ib.apps.cbonline.co.uk https://*.snapchat.com https://*.sc-static.net https://*.tapad.com https://*.adsrvr.org https://*.contentsquare.net https://*.evidon.com https://servicestatus.virginmoney.com https://analytics.tiktok.com https://www.google.com https://pagead2.googlesyndication.com https://unq7f56816c449942b29df6fd5472fe3-crm11.omnichannelengagementhub.com https://unq7da76c54f24b44f8b8112d6fb1c80-crm11.omnichannelengagementhub.com https://oc-cdn-public-gbr.azureedge.net; img-src 'self' data: https: https://*.flashtalking.com https://*.woosmap.com https://s.pinimg.com https://ct.pinterest.com; style-src 'self' 'unsafe-inline' data: https://oc-cdn-public-gbr.azureedge.net https://internet-banking.ib.apps.ybonline.co.uk https://www.gstatic.com https://fonts.googleapis.com https://translate.googleapis.com; font-src 'self' data: https://*.ib.apps.virginmoney.com https://fonts.gstatic.com https://*.woosmap.com; media-src 'self'; object-src 'self' https://*.cybservices.co.uk https://*.apps.virginmoney.com https://*.apps.cbonline.co.uk https://*.apps.ybonline.co.uk https://*.apps.youandb.co.uk blob:; worker-src 'self' blob:; report-uri https://pscyb.report-uri.com/r/t/csp/enforce;\r\nX-Frame-Options: sameorigin\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1;mode=block\r\nReferrer-Policy: no-referrer-when-downgrade\r\nx-bpi-correlation_id: 1aabb459-ab9f-41ff-4692-bd31febab268\r\nStrict-Transport-Security: max-age=16070400; includeSubDomains\r\nSet-Cookie: dtCookie=v_4_srv_7_sn_BA5CCD4A310BBAE39A818C15BC4643F9_perc_100000_ol_0_mul_1_app-3A59fd969f9ced0bcd_1_rcs-3Acss_0; Path=/; Domain=.virginmoney.com\nf5avraaaaaaaaaaaaaaaa_session_=BEDALOFHLNPGBFKKKINNKDDMODIOMBCJBGFJMDHCMDEACHAIHMFKHAPHGNEHNNJPLNADCNOOOIHFHGFNEGCAOEIMCABCJNEMFLNBOEEKHIKKAKNJKDECDEJKBNBOLKMO; HttpOnly; secure;\nTS01314f87=01782174632103f67b1b47a5a06a92e2ac9e9b20bc55d131111bdf8766e0caf7253df6d17863c957b1873d7ca2dcb629ad5203470165f4e1802c08d5ca00fa6e2513cb1b6e3d8a3683d13ee0c9ab85a5c50e0895d9; Path=/; Domain=.login-and-registration.ib.apps.virginmoney.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Edge Network","description":"Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager.","website":"https://learn.microsoft.com/en-us/azure/cdn/cdn-overview","common_platform_enumeration":"","icon":"Azure.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"1fd3b2aa779c8f1927bab8b8769445c4","sha1":"8b571a65dc31df093d50d127bdae3ad98abc189a","sha256":"36e3ac238ee994b6991c018ed29b026eef42b97038b9a1cef3271773e773322b","sha512":"222c7ed68584146a4003758ff0a7acf2c5892c5a302c6841e62ca012474fbe3e4c6a48ff383918f0e21af6163ca3fc09c69bb25f2085d18f3ec4fe19278abc21","ssdeep":"192:TBeSr97qeDHUXE5BLG86Qv8at9DqGkWFyfZlQ7H:TBeM9O80XEHLGKv8at9D7kJfZQ","tlshash":"6e029e92701014281d2f21deb9a632b8ad3269ddaf1dab85b955e880b1503780e75bc5","first_seen":"2026-02-09T20:18:40.280447Z","last_seen":"2026-02-28T15:24:08.372133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":133,"connect":32,"send":0,"wait":53,"receive":2,"ssl":599},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Feb 2026 15:23:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\ncf-ray: 9d50ec97edb7723c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 80664\r\nexpires: Thu, 18 Feb 2027 15:23:37 GMT\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FgjkULjj6fyeE3yoRdqKTeyi1jo5iRj%2BkzK5O%2FB09v8IDD%2FCIWvygb1sdaJ%2FayaeDoKK%2FCTf6Ex5eneWwunbTcnrTTnw%2FMdj9jBs9xRriXZ1WI8zGKxgzVUG7wGuASz0LVi8YjmB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-04T13:45:15.144372Z","times_seen":236715,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/000899d460b7eb798c2a9363b6bc5bae.woff2","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babyroom2024.dev.siter.kz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 02:56:51 GMT","end":"Sun, 17 May 2026 02:56:50 GMT"},"fingerprint":{"sha1":"5D:5C:10:46:FA:28:6A:89:B2:B9:3C:BD:26:E1:AF:E3:97:7C:CC:F5","sha256":"75:D4:93:5C:3F:4D:BE:75:D5:24:B6:2B:34:13:58:DE:32:75:B0:8F:F3:3F:6C:6B:8B:2C:12:9C:FA:D2:9A:F0"}}},"request":{"raw":"GET /blog/000899d460b7eb798c2a9363b6bc5bae.woff2 HTTP/1.1\r\nHost: babyroom2024.dev.siter.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/blog/index.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 15:23:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 95256\r\nlast-modified: Fri, 27 Feb 2026 19:18:05 GMT\r\netag: \"69a1eded-17418\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":95256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 95256, version 1.0","md5":"000899d460b7eb798c2a9363b6bc5bae","sha1":"8fddc5fd1359e44582381c03a42667a774555641","sha256":"5f310d16c579ab3b1e9e8cb3298e14bb935ed7e802e1b23c35bd1819307d6c59","sha512":"214728669fea7b894fe9a5be7acee15a9f471302b672befdf2dfe95e64b651c6ec5cc47ede4612cb4b7e5435f2d9e1ecb5d54138e226ea6aec6a40b93385358b","ssdeep":"1536:kOe6+mFyZmIZcIp84GQ5uEPYRau8fCstArjC7jjenzbEF1YYqSftT:kOFFyZmGcIp8FQYEwRaff9aieXEF1XqC","tlshash":"cd930289720456aff11d21b9fcfe031ae8cb8f85a47529e13b23528815b56ff60db90d","first_seen":"2023-04-14T06:59:04Z","last_seen":"2026-03-19T18:54:24.23102Z","times_seen":114,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":89,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/d55e957612a3b2a373925d920f4af6b1.woff2","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babyroom2024.dev.siter.kz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 02:56:51 GMT","end":"Sun, 17 May 2026 02:56:50 GMT"},"fingerprint":{"sha1":"5D:5C:10:46:FA:28:6A:89:B2:B9:3C:BD:26:E1:AF:E3:97:7C:CC:F5","sha256":"75:D4:93:5C:3F:4D:BE:75:D5:24:B6:2B:34:13:58:DE:32:75:B0:8F:F3:3F:6C:6B:8B:2C:12:9C:FA:D2:9A:F0"}}},"request":{"raw":"GET /blog/d55e957612a3b2a373925d920f4af6b1.woff2 HTTP/1.1\r\nHost: babyroom2024.dev.siter.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/blog/index.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 15:23:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 88816\r\nlast-modified: Fri, 27 Feb 2026 19:18:32 GMT\r\netag: \"69a1ee08-15af0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":88816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 88816, version 1.0","md5":"d55e957612a3b2a373925d920f4af6b1","sha1":"845393466b8e74a8d6a907a2afea58a0c5dcac8f","sha256":"03c75b1b36edb0aad6ff58705f95e22682862b05a6a5e7bfe1005cc8bb260bd2","sha512":"b1914904ec3448f1669a76331870beedb368a424fa26006bd025b7db3ce17dc4d30fece9f304c9df41da22cf40c4a345f3f7a64f64222825c6a698ff141049c6","ssdeep":"1536:jQ+T0OM4tkE/RC7AjMgpY06TlBoFmSamYujOWlZQt7Vo0BVwioyU/8:XSgpC7AjMgy06TlBYmYjOWHQVlOXI","tlshash":"029312a893432adea3b2f1e1d9318573c237939920c464e386c574cb24f49d6b93c779","first_seen":"2023-04-14T06:59:03Z","last_seen":"2026-03-19T18:54:24.257946Z","times_seen":215,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/b818e3bac1b8e0d2d0c27641c164fe6d.woff2","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babyroom2024.dev.siter.kz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 02:56:51 GMT","end":"Sun, 17 May 2026 02:56:50 GMT"},"fingerprint":{"sha1":"5D:5C:10:46:FA:28:6A:89:B2:B9:3C:BD:26:E1:AF:E3:97:7C:CC:F5","sha256":"75:D4:93:5C:3F:4D:BE:75:D5:24:B6:2B:34:13:58:DE:32:75:B0:8F:F3:3F:6C:6B:8B:2C:12:9C:FA:D2:9A:F0"}}},"request":{"raw":"GET /blog/b818e3bac1b8e0d2d0c27641c164fe6d.woff2 HTTP/1.1\r\nHost: babyroom2024.dev.siter.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/blog/index.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 15:23:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 95788\r\nlast-modified: Fri, 27 Feb 2026 19:18:14 GMT\r\netag: \"69a1edf6-1762c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":95788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 95788, version 1.0","md5":"b818e3bac1b8e0d2d0c27641c164fe6d","sha1":"1c276cffbd9a2b9946202dc649c000a45016fce0","sha256":"c09f5cde27f73057311e1de51c5d952a07e6495211fc368aec4a916320cb6310","sha512":"34a513d8e4109703623226426bdc31418830d0613681ac28e5c9d08da3bbfe6b8028d22fa42736450b1b4aba62b17b8245df9b6cf3f759f05b1a19aa1ea4bf94","ssdeep":"1536:ckCF5tbc+YYIiGEHNHeQMZ+0Pe1IEBf0iqUwGxZWt4wu7nR6B2V3yyXS0BDT4e+5:AtA+Y9EHNHX0PGIECiqG7Wt4BBBi051C","tlshash":"019312dc1a124582d91a432ac4a1297df6c47f1823bdb58aec399dc8f7adc66e1c91c3","first_seen":"2023-04-14T06:59:04Z","last_seen":"2026-03-19T18:54:24.24513Z","times_seen":53,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:36.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Feb 2026 15:23:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 29363\r\ncf-ray: 9d50ec911e4b8be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-169d5\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 79520\r\nexpires: Thu, 18 Feb 2027 15:23:36 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4jm8KIGXTKC4V%2B7pmthY1R44Tr6z%2BUPL0NobL3a%2BGOuO7EaQrly69C%2BjRJEtzY6u3tsAz5IB2CrCB1DdQlNqu5InYMrI4oloekXVgjp5deqGxdU2c4vnTjwvjIENFRY3w6Elh0Qt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T13:47:59.453643Z","times_seen":60599,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":27,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-and-registration.ib.apps.virginmoney.com/e7f4b92bc0c804f3c272bfef71319d39.png","fqdn":"login-and-registration.ib.apps.virginmoney.com","domain":"virginmoney.com","tld":"com"},"ip":{"addr":"81.128.241.72","port":443,"asn":2856,"as":"British Telecommunications PLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:36.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ib.apps.virginmoney.com","organization":"Clydesdale Bank PLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Wed, 25 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:49:00:F9:BA:3C:FB:07:7D:4A:FA:78:79:58:AF:AF:AF:67:F1:9C","sha256":"91:83:30:76:BC:A6:D8:41:BB:64:47:4C:56:AC:88:C3:D4:B3:39:C7:77:79:71:32:E5:B0:68:61:51:34:11:63"}}},"request":{"raw":"GET /e7f4b92bc0c804f3c272bfef71319d39.png HTTP/1.1\r\nHost: login-and-registration.ib.apps.virginmoney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Feb 2026 15:23:37 GMT\r\nAccess-Control-Allow-Headers: \r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Methods: \r\nLast-Modified: Wed, 14 Jan 2026 13:08:23 GMT\r\nETag: \"46c-64858cd8a9fc0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1132\r\nVary: Accept-Encoding\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"1796816100\"\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Security-Policy: default-src 'self'; frame-ancestors 'self' https://*.cybonline.co.uk https://*.apps.cbonline.co.uk https://*.apps.ybonline.co.uk https://*.apps.youandb.co.uk https://*.apps.virginmoney.com; frame-src 'self' https://td.doubleclick.net/ https://oc-cdn-public-gbr.azureedge.net https://tr.snapchat.com https://*.flashtalking.com https://*.adsrvr.org https://*.ib.apps.virginmoney.com https://*.apps.virginmoney.com https://*.apps.cbonline.co.uk https://*.apps.youandb.co.uk https://*.apps.ybonline.co.uk https://cybg.egain.cloud https://analytics.analytics-egain.com https://1791089.fls.doubleclick.net https://*.cbonline.co.uk https://*.ybonline.co.uk https://*.cybonline.co.uk https://*.cybservices.co.uk https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://*.youandb.co.uk blob:; child-src 'self' blob:; script-src 'self' blob: https://*.woosmap.com https://manage-personal-details.ib.apps.virginmoney.com https://oc-cdn-public-gbr.azureedge.net https://analytics.tiktok.com https://*.adsrvr.org/up_loader.1.1.0.js https://tr.snapchat.com/config/com1602abfb-0729-47a4-80ac-0af05667d4aa.js https://tr.snapchat.com/config/com/1602abfb-0729-47a4-80ac-0af05667d4aa.js https://sc-static.net/scevent.min.js https://*.flashtalking.com https://*.quantserve.com https://*.evidon.com https://mpsnare.iesnare.com https://static.ads-twitter.com https://analytics.twitter.com https://cloud-emea.analytics-egain.com https://t.contentsquare.net https://contentsquare.com 'unsafe-eval' 'unsafe-inline' https://cdn.appdynamics.com https://cybg.egain.cloud https://www.splash-screen.net https://*.we-stats.com https://www.googletagmanager.com https://analytics.analytics-egain.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://273.n.trusteer.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; script-src-elem 'self' 'unsafe-inline' https://s.pinimg.com https://ct.pinterest.com https://manage-personal-details.ib.apps.virginmoney.com https://*.woosmap.com https://analytics.tiktok.com https://sc-static.net/scevent.min.js https://tr.snapchat.com/config/com/1602abfb-0729-47a4-80ac-0af05667d4aa.js https://js.adsrvr.org/up_loader.1.1.0.js https://analytics.tiktok.com/i18n/pixel/events.js https://secure.quantserve.com/quant.js https://oc-cdn-public-gbr.azureedge.net https://*.evidon.com https://static.ads-twitter.com https://analytics.twitter.com https://mpsnare.iesnare.com https://app.contentsquare.com https://connect.facebook.net https://t.contentsquare.net https://cloud-emea.analytics-egain.com https://cdn.appdynamics.com https://cybg.egain.cloud https://www.splash-screen.net https://*.we-stats.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.analytics-egain.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; connect-src 'self' https://s.pinimg.com https://ct.pinterest.com https://app.launchdarkly.com https://events.launchdarkly.com https://api-gateway.ib-core.prd-ib.dse.ce.virginmoney.com https://unq7da76c54f24b44f8b8112d6fb1c80-crm11.omnichannelengagementhub.com/livechatconnector/v2/lcwfcsdetails/7da76c54-f24b-44f8-b811-2d6fb1c809a7 https://*.ib.api.virginmoney.com https://*.woosmap.com https://apps.cybonline.co.uk https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net/pagead/landing https://*.we-stats.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://273.n.trusteer.com https://tr.snapchat.com https://analytics.tiktok.com/api/v2/pixel https://analytics.tiktok.com/api/v2/pixel/act https://*.customers.biocatch.com https://*.cybservices.co.uk https://static-content.ib.apps.virginmoney.com https://internet-banking.ib.apps.ybonline.co.uk https://internet-banking.ib.apps.cbonline.co.uk https://*.snapchat.com https://*.sc-static.net https://*.tapad.com https://*.adsrvr.org https://*.contentsquare.net https://*.evidon.com https://servicestatus.virginmoney.com https://analytics.tiktok.com https://www.google.com https://pagead2.googlesyndication.com https://unq7f56816c449942b29df6fd5472fe3-crm11.omnichannelengagementhub.com https://unq7da76c54f24b44f8b8112d6fb1c80-crm11.omnichannelengagementhub.com https://oc-cdn-public-gbr.azureedge.net; img-src 'self' data: https: https://*.flashtalking.com https://*.woosmap.com https://s.pinimg.com https://ct.pinterest.com; style-src 'self' 'unsafe-inline' data: https://oc-cdn-public-gbr.azureedge.net https://internet-banking.ib.apps.ybonline.co.uk https://www.gstatic.com https://fonts.googleapis.com https://translate.googleapis.com; font-src 'self' data: https://*.ib.apps.virginmoney.com https://fonts.gstatic.com https://*.woosmap.com; media-src 'self'; object-src 'self' https://*.cybservices.co.uk https://*.apps.virginmoney.com https://*.apps.cbonline.co.uk https://*.apps.ybonline.co.uk https://*.apps.youandb.co.uk blob:; worker-src 'self' blob:; report-uri https://pscyb.report-uri.com/r/t/csp/enforce;\r\nX-Frame-Options: sameorigin\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1;mode=block\r\nReferrer-Policy: no-referrer-when-downgrade\r\nx-bpi-correlation_id: dd5d8aad-bdd5-495e-488b-6c31e6c822e9\r\nStrict-Transport-Security: max-age=16070400; includeSubDomains\r\nSet-Cookie: dtCookie=v_4_srv_3_sn_81A38EC59E95E0ECAB2D450EE9533A55_perc_100000_ol_0_mul_1_app-3A59fd969f9ced0bcd_1_rcs-3Acss_0; Path=/; Domain=.virginmoney.com\nf5avraaaaaaaaaaaaaaaa_session_=NAJNBIJKIHCNDLCDDGFLPFPCDNFEEKEONGKBBOGLJMPHFDKAHNNAGJDHCHFHOJFPONCDBHGJOIFLBAGIAKMAMDHPCAODNIJJPPCBNIMHELOKOIGPFAPMKCDNKJEICKGA; HttpOnly; secure;\nTS01314f87=017821746364722a27edcb8645de51419c3bbb664b829fd1b33b562c5f62fbe51b881d60e6a07a768ba01f89275f1c78118c0150d4d0a68bc6dc5f364a676e72366cb096ec8ebdf6538229d8321a4fa7f1285cf44c; Path=/; Domain=.login-and-registration.ib.apps.virginmoney.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Edge Network","description":"Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager.","website":"https://learn.microsoft.com/en-us/azure/cdn/cdn-overview","common_platform_enumeration":"","icon":"Azure.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"e7f4b92bc0c804f3c272bfef71319d39","sha1":"dd09ee81bb9c0ab91afa2f4d6e3ad386be785c72","sha256":"8f824bc6ab86215e2acbf56dc3da3b95afc1f62ced79df865420a034a4ce3ec4","sha512":"88653de802c699847a08245b86c165ef2e6019346ddd553e4786e18901df9ca276ad3682f2f9c5018a3f2a38fa98ac667c94cdc6f2a2dbf15398b2d0c94c3828","ssdeep":"","tlshash":"c12160c7a130f102c67b50faae43048cab237b830e4ed68a7dc68418582977922f0f87","first_seen":"2026-02-28T15:24:08.37622Z","last_seen":"2026-02-28T15:24:08.37622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":133,"connect":34,"send":0,"wait":49,"receive":1,"ssl":372},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.w3schools.com/w3css/4/w3.css","fqdn":"www.w3schools.com","domain":"w3schools.com","tld":"com"},"ip":{"addr":"2.23.13.24","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certification.w3schools.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:18:37 GMT","end":"Sun, 29 Mar 2026 04:18:36 GMT"},"fingerprint":{"sha1":"9C:AE:11:94:D5:A3:46:88:E8:CD:4D:34:CA:8C:1C:78:13:39:0D:00","sha256":"CE:4F:6D:25:11:8F:F1:88:69:55:23:99:0B:DE:FB:77:76:65:8E:F4:B2:5C:87:6F:34:27:F3:B8:C4:2A:C9:F3"}}},"request":{"raw":"GET /w3css/4/w3.css HTTP/1.1\r\nHost: www.w3schools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Feb 2026 10:30:20 GMT\r\naccept-ranges: bytes\r\netag: \"046656af89fdc1:0\"\r\ncontent-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nx-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5256\r\ncache-control: public, max-age=30569706\r\nexpires: Wed, 17 Feb 2027 10:58:43 GMT\r\ndate: Sat, 28 Feb 2026 15:23:37 GMT\r\nx-loc: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"75b37d4abbdde1322116d2744181081d","sha1":"6d6b5ff442af4682c30e970c382002a7c694ac5b","sha256":"c4f2aba13970ecf8303fb9329f97c8824861569273b0aa27acce48abc61d04f5","sha512":"8ba303e078af3f71176b6e7fa5c32b0f3984014393133a960da7103bc78204a144a3d034a3d1ad7126f1547f45408e00e036175f54766ffccc8cf84cd4c129a5","ssdeep":"384:aHHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:aHHCLYXfl1q8CarY64Cb+dl","tlshash":"fbb2f022ff8a1138261a873660d5fbfc573a8681df9f1b7a7030373943894c26796e49","first_seen":"2023-06-26T21:08:35Z","last_seen":"2026-04-03T22:52:06.955674Z","times_seen":16143,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":69,"dns":42,"connect":1,"send":0,"wait":12,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-and-registration.ib.apps.virginmoney.com/e7f4b92bc0c804f3c272bfef71319d39.png","fqdn":"login-and-registration.ib.apps.virginmoney.com","domain":"virginmoney.com","tld":"com"},"ip":{"addr":"81.128.241.72","port":443,"asn":2856,"as":"British Telecommunications PLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ib.apps.virginmoney.com","organization":"Clydesdale Bank PLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Wed, 25 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:49:00:F9:BA:3C:FB:07:7D:4A:FA:78:79:58:AF:AF:AF:67:F1:9C","sha256":"91:83:30:76:BC:A6:D8:41:BB:64:47:4C:56:AC:88:C3:D4:B3:39:C7:77:79:71:32:E5:B0:68:61:51:34:11:63"}}},"request":{"raw":"GET /e7f4b92bc0c804f3c272bfef71319d39.png HTTP/1.1\r\nHost: login-and-registration.ib.apps.virginmoney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Feb 2026 15:23:37 GMT\r\nAccess-Control-Allow-Headers: \r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Methods: \r\nLast-Modified: Wed, 14 Jan 2026 13:08:23 GMT\r\nETag: \"46c-64858cd8a9fc0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1132\r\nVary: Accept-Encoding\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"-818862953\"\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Security-Policy: default-src 'self'; frame-ancestors 'self' https://*.cybonline.co.uk https://*.apps.cbonline.co.uk https://*.apps.ybonline.co.uk https://*.apps.youandb.co.uk https://*.apps.virginmoney.com; frame-src 'self' https://td.doubleclick.net/ https://oc-cdn-public-gbr.azureedge.net https://tr.snapchat.com https://*.flashtalking.com https://*.adsrvr.org https://*.ib.apps.virginmoney.com https://*.apps.virginmoney.com https://*.apps.cbonline.co.uk https://*.apps.youandb.co.uk https://*.apps.ybonline.co.uk https://cybg.egain.cloud https://analytics.analytics-egain.com https://1791089.fls.doubleclick.net https://*.cbonline.co.uk https://*.ybonline.co.uk https://*.cybonline.co.uk https://*.cybservices.co.uk https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://*.youandb.co.uk blob:; child-src 'self' blob:; script-src 'self' blob: https://*.woosmap.com https://manage-personal-details.ib.apps.virginmoney.com https://oc-cdn-public-gbr.azureedge.net https://analytics.tiktok.com https://*.adsrvr.org/up_loader.1.1.0.js https://tr.snapchat.com/config/com1602abfb-0729-47a4-80ac-0af05667d4aa.js https://tr.snapchat.com/config/com/1602abfb-0729-47a4-80ac-0af05667d4aa.js https://sc-static.net/scevent.min.js https://*.flashtalking.com https://*.quantserve.com https://*.evidon.com https://mpsnare.iesnare.com https://static.ads-twitter.com https://analytics.twitter.com https://cloud-emea.analytics-egain.com https://t.contentsquare.net https://contentsquare.com 'unsafe-eval' 'unsafe-inline' https://cdn.appdynamics.com https://cybg.egain.cloud https://www.splash-screen.net https://*.we-stats.com https://www.googletagmanager.com https://analytics.analytics-egain.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://273.n.trusteer.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; script-src-elem 'self' 'unsafe-inline' https://s.pinimg.com https://ct.pinterest.com https://manage-personal-details.ib.apps.virginmoney.com https://*.woosmap.com https://analytics.tiktok.com https://sc-static.net/scevent.min.js https://tr.snapchat.com/config/com/1602abfb-0729-47a4-80ac-0af05667d4aa.js https://js.adsrvr.org/up_loader.1.1.0.js https://analytics.tiktok.com/i18n/pixel/events.js https://secure.quantserve.com/quant.js https://oc-cdn-public-gbr.azureedge.net https://*.evidon.com https://static.ads-twitter.com https://analytics.twitter.com https://mpsnare.iesnare.com https://app.contentsquare.com https://connect.facebook.net https://t.contentsquare.net https://cloud-emea.analytics-egain.com https://cdn.appdynamics.com https://cybg.egain.cloud https://www.splash-screen.net https://*.we-stats.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.analytics-egain.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; connect-src 'self' https://s.pinimg.com https://ct.pinterest.com https://app.launchdarkly.com https://events.launchdarkly.com https://api-gateway.ib-core.prd-ib.dse.ce.virginmoney.com https://unq7da76c54f24b44f8b8112d6fb1c80-crm11.omnichannelengagementhub.com/livechatconnector/v2/lcwfcsdetails/7da76c54-f24b-44f8-b811-2d6fb1c809a7 https://*.ib.api.virginmoney.com https://*.woosmap.com https://apps.cybonline.co.uk https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net/pagead/landing https://*.we-stats.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://273.n.trusteer.com https://tr.snapchat.com https://analytics.tiktok.com/api/v2/pixel https://analytics.tiktok.com/api/v2/pixel/act https://*.customers.biocatch.com https://*.cybservices.co.uk https://static-content.ib.apps.virginmoney.com https://internet-banking.ib.apps.ybonline.co.uk https://internet-banking.ib.apps.cbonline.co.uk https://*.snapchat.com https://*.sc-static.net https://*.tapad.com https://*.adsrvr.org https://*.contentsquare.net https://*.evidon.com https://servicestatus.virginmoney.com https://analytics.tiktok.com https://www.google.com https://pagead2.googlesyndication.com https://unq7f56816c449942b29df6fd5472fe3-crm11.omnichannelengagementhub.com https://unq7da76c54f24b44f8b8112d6fb1c80-crm11.omnichannelengagementhub.com https://oc-cdn-public-gbr.azureedge.net; img-src 'self' data: https: https://*.flashtalking.com https://*.woosmap.com https://s.pinimg.com https://ct.pinterest.com; style-src 'self' 'unsafe-inline' data: https://oc-cdn-public-gbr.azureedge.net https://internet-banking.ib.apps.ybonline.co.uk https://www.gstatic.com https://fonts.googleapis.com https://translate.googleapis.com; font-src 'self' data: https://*.ib.apps.virginmoney.com https://fonts.gstatic.com https://*.woosmap.com; media-src 'self'; object-src 'self' https://*.cybservices.co.uk https://*.apps.virginmoney.com https://*.apps.cbonline.co.uk https://*.apps.ybonline.co.uk https://*.apps.youandb.co.uk blob:; worker-src 'self' blob:; report-uri https://pscyb.report-uri.com/r/t/csp/enforce;\r\nX-Frame-Options: sameorigin\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1;mode=block\r\nReferrer-Policy: no-referrer-when-downgrade\r\nx-bpi-correlation_id: 9834aab0-3cbe-4273-6c31-b3f8bc2be23d\r\nStrict-Transport-Security: max-age=16070400; includeSubDomains\r\nSet-Cookie: dtCookie=v_4_srv_2_sn_2DBEB11BFE70AAECD7A3799D50D2B13D_perc_100000_ol_0_mul_1_app-3A59fd969f9ced0bcd_1_rcs-3Acss_0; Path=/; Domain=.virginmoney.com\nf5avraaaaaaaaaaaaaaaa_session_=ODNPJNGDCPIBPGKNDFECCDDGKAHDADIOCCFGHBGPEGFHNKMHBLCCNNAJFFBIMIFKNHLDNNEPOICFHCKMDLJACLDMCAKLEIGJNOLEABDEHILFDHILDOBBMCLBHMJEFPPB; HttpOnly; secure;\nTS01314f87=01782174630133d73cf9345e24d46b165392bf7b2bebea43c29117f75ca8fa5f056cb575085daee98068dd8ad656e7a17cc77476bd13b0229cf4f1c33b993803e3a0891a8fbc0554e6ec54cb11826df1a71dc207cc; Path=/; Domain=.login-and-registration.ib.apps.virginmoney.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Azure Edge Network","description":"Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager.","website":"https://learn.microsoft.com/en-us/azure/cdn/cdn-overview","common_platform_enumeration":"","icon":"Azure.svg","categories":["Miscellaneous"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"e7f4b92bc0c804f3c272bfef71319d39","sha1":"dd09ee81bb9c0ab91afa2f4d6e3ad386be785c72","sha256":"8f824bc6ab86215e2acbf56dc3da3b95afc1f62ced79df865420a034a4ce3ec4","sha512":"88653de802c699847a08245b86c165ef2e6019346ddd553e4786e18901df9ca276ad3682f2f9c5018a3f2a38fa98ac667c94cdc6f2a2dbf15398b2d0c94c3828","ssdeep":"","tlshash":"c12160c7a130f102c67b50faae43048cab237b830e4ed68a7dc68418582977922f0f87","first_seen":"2026-02-28T15:24:08.37622Z","last_seen":"2026-02-28T15:24:08.37622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"babyroom2024.dev.siter.kz/blog/index.html","fqdn":"babyroom2024.dev.siter.kz","domain":"siter.kz","tld":"kz"},"ip":{"addr":"89.35.125.32","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-28T15:23:35.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"babyroom2024.dev.siter.kz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 02:56:51 GMT","end":"Sun, 17 May 2026 02:56:50 GMT"},"fingerprint":{"sha1":"5D:5C:10:46:FA:28:6A:89:B2:B9:3C:BD:26:E1:AF:E3:97:7C:CC:F5","sha256":"75:D4:93:5C:3F:4D:BE:75:D5:24:B6:2B:34:13:58:DE:32:75:B0:8F:F3:3F:6C:6B:8B:2C:12:9C:FA:D2:9A:F0"}}},"request":{"raw":"GET /blog/index.html HTTP/1.1\r\nHost: babyroom2024.dev.siter.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Feb 2026 15:23:28 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 27 Feb 2026 19:18:48 GMT\r\netag: W/\"69a1ee18-d80\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2285), with CRLF line terminators","md5":"f79d7e8537f6318a9d1d30dca95e5895","sha1":"0937b2643d9ff64e8291d09f2bced2a61d226396","sha256":"c314df1f0d84db1bb69cb9ac3063cf2b56c2430405b70f7e758acf79fc95a826","sha512":"981c240c4d67240683c8431d6599d9b0b47b5b89142df9f5c3ff0d77c1bb2ba7538f05bee1024836a743eda5ee3b90b1a5d136fd5d111944284fdea3377e21fa","ssdeep":"","tlshash":"1b61834e2dd0bcc59b9697fa747760dcd4476d084bc4c40fb12250b0bea1e05a6e3332","first_seen":"2026-02-28T15:24:08.378404Z","last_seen":"2026-02-28T15:24:08.378404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":275,"dns":98,"connect":88,"send":0,"wait":86,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-and-registration.ib.apps.virginmoney.com/1fd3b2aa779c8f1927bab8b8769445c4.png","fqdn":"login-and-registration.ib.apps.virginmoney.com","domain":"virginmoney.com","tld":"com"},"ip":{"addr":"81.128.241.72","port":443,"asn":2856,"as":"British Telecommunications PLC","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://babyroom2024.dev.siter.kz/blog/index.html","date":"2026-02-28T15:23:37.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ib.apps.virginmoney.com","organization":"Clydesdale Bank PLC"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 26 Nov 2025 00:00:00 GMT","end":"Wed, 25 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"19:49:00:F9:BA:3C:FB:07:7D:4A:FA:78:79:58:AF:AF:AF:67:F1:9C","sha256":"91:83:30:76:BC:A6:D8:41:BB:64:47:4C:56:AC:88:C3:D4:B3:39:C7:77:79:71:32:E5:B0:68:61:51:34:11:63"}}},"request":{"raw":"GET /1fd3b2aa779c8f1927bab8b8769445c4.png HTTP/1.1\r\nHost: login-and-registration.ib.apps.virginmoney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://babyroom2024.dev.siter.kz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Feb 2026 15:23:37 GMT\r\nAccess-Control-Allow-Headers: \r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Methods: \r\nLast-Modified: Wed, 14 Jan 2026 13:08:23 GMT\r\nETag: \"205f-64858cd8a9fc0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 8287\r\nVary: Accept-Encoding\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"2042828930\"\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\nContent-Security-Policy: default-src 'self'; frame-ancestors 'self' https://*.cybonline.co.uk https://*.apps.cbonline.co.uk https://*.apps.ybonline.co.uk https://*.apps.youandb.co.uk https://*.apps.virginmoney.com; frame-src 'self' https://td.doubleclick.net/ https://oc-cdn-public-gbr.azureedge.net https://tr.snapchat.com https://*.flashtalking.com https://*.adsrvr.org https://*.ib.apps.virginmoney.com https://*.apps.virginmoney.com https://*.apps.cbonline.co.uk https://*.apps.youandb.co.uk https://*.apps.ybonline.co.uk https://cybg.egain.cloud https://analytics.analytics-egain.com https://1791089.fls.doubleclick.net https://*.cbonline.co.uk https://*.ybonline.co.uk https://*.cybonline.co.uk https://*.cybservices.co.uk https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://*.youandb.co.uk blob:; child-src 'self' blob:; script-src 'self' blob: https://*.woosmap.com https://manage-personal-details.ib.apps.virginmoney.com https://oc-cdn-public-gbr.azureedge.net https://analytics.tiktok.com https://*.adsrvr.org/up_loader.1.1.0.js https://tr.snapchat.com/config/com1602abfb-0729-47a4-80ac-0af05667d4aa.js https://tr.snapchat.com/config/com/1602abfb-0729-47a4-80ac-0af05667d4aa.js https://sc-static.net/scevent.min.js https://*.flashtalking.com https://*.quantserve.com https://*.evidon.com https://mpsnare.iesnare.com https://static.ads-twitter.com https://analytics.twitter.com https://cloud-emea.analytics-egain.com https://t.contentsquare.net https://contentsquare.com 'unsafe-eval' 'unsafe-inline' https://cdn.appdynamics.com https://cybg.egain.cloud https://www.splash-screen.net https://*.we-stats.com https://www.googletagmanager.com https://analytics.analytics-egain.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://273.n.trusteer.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; script-src-elem 'self' 'unsafe-inline' https://s.pinimg.com https://ct.pinterest.com https://manage-personal-details.ib.apps.virginmoney.com https://*.woosmap.com https://analytics.tiktok.com https://sc-static.net/scevent.min.js https://tr.snapchat.com/config/com/1602abfb-0729-47a4-80ac-0af05667d4aa.js https://js.adsrvr.org/up_loader.1.1.0.js https://analytics.tiktok.com/i18n/pixel/events.js https://secure.quantserve.com/quant.js https://oc-cdn-public-gbr.azureedge.net https://*.evidon.com https://static.ads-twitter.com https://analytics.twitter.com https://mpsnare.iesnare.com https://app.contentsquare.com https://connect.facebook.net https://t.contentsquare.net https://cloud-emea.analytics-egain.com https://cdn.appdynamics.com https://cybg.egain.cloud https://www.splash-screen.net https://*.we-stats.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.analytics-egain.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; connect-src 'self' https://s.pinimg.com https://ct.pinterest.com https://app.launchdarkly.com https://events.launchdarkly.com https://api-gateway.ib-core.prd-ib.dse.ce.virginmoney.com https://unq7da76c54f24b44f8b8112d6fb1c80-crm11.omnichannelengagementhub.com/livechatconnector/v2/lcwfcsdetails/7da76c54-f24b-44f8-b811-2d6fb1c809a7 https://*.ib.api.virginmoney.com https://*.woosmap.com https://apps.cybonline.co.uk https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net/pagead/landing https://*.we-stats.com https://*.omtrdc.net https://*.2o7.net https://*.demdex.net https://*.adobedtm.com https://cm.everesttech.com https://273.n.trusteer.com https://tr.snapchat.com https://analytics.tiktok.com/api/v2/pixel https://analytics.tiktok.com/api/v2/pixel/act https://*.customers.biocatch.com https://*.cybservices.co.uk https://static-content.ib.apps.virginmoney.com https://internet-banking.ib.apps.ybonline.co.uk https://internet-banking.ib.apps.cbonline.co.uk https://*.snapchat.com https://*.sc-static.net https://*.tapad.com https://*.adsrvr.org https://*.contentsquare.net https://*.evidon.com https://servicestatus.virginmoney.com https://analytics.tiktok.com https://www.google.com https://pagead2.googlesyndication.com https://unq7f56816c449942b29df6fd5472fe3-crm11.omnichannelengagementhub.com https://unq7da76c54f24b44f8b8112d6fb1c80-crm11.omnichannelengagementhub.com https://oc-cdn-public-gbr.azureedge.net; img-src 'self' data: https: https://*.flashtalking.com https://*.woosmap.com https://s.pinimg.com https://ct.pinterest.com; style-src 'self' 'unsafe-inline' data: https://oc-cdn-public-gbr.azureedge.net https://internet-banking.ib.apps.ybonline.co.uk https://www.gstatic.com https://fonts.googleapis.com https://translate.googleapis.com; font-src 'self' data: https://*.ib.apps.virginmoney.com https://fonts.gstatic.com https://*.woosmap.com; media-src 'self'; object-src 'self' https://*.cybservices.co.uk https://*.apps.virginmoney.com https://*.apps.cbonline.co.uk https://*.apps.ybonline.co.uk https://*.apps.youandb.co.uk blob:; worker-src 'self' blob:; report-uri https://pscyb.report-uri.com/r/t/csp/enforce;\r\nX-Frame-Options: sameorigin\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1;mode=block\r\nReferrer-Policy: no-referrer-when-downgrade\r\nx-bpi-correlation_id: 9c33a435-f763-422f-6859-5308a3bb119b\r\nStrict-Transport-Security: max-age=16070400; includeSubDomains\r\nSet-Cookie: dtCookie=v_4_srv_4_sn_6553FFFA2C4D2B97C77425950AE71810_perc_100000_ol_0_mul_1_app-3A59fd969f9ced0bcd_1_rcs-3Acss_0; Path=/; Domain=.virginmoney.com\nf5avraaaaaaaaaaaaaaaa_session_=CFCKOPGDPFLCDHBCABGBBHFJGPKLDLFEAKBAKFCJLIMNAJBHGDDGLCJEKDNAGAKAHFDDJIDJOIIJAFBPCBLAEEKLCAMBKLBAGEGBJIKEBHBBACCFPOMLAFPLJNMPOGCH; HttpOnly; secure;\nTS01314f87=017821746345bb16765a3b82961f60f7bd8546085c81544deb136c994185606eb9352168f36da02a5f79e0b449e33f68a1a7430bfb50802bde5283a0a36358c02d781367aeb6a4cb8d5f609a0381c6d1ccf7ec51f0; Path=/; Domain=.login-and-registration.ib.apps.virginmoney.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Edge Network","description":"Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager.","website":"https://learn.microsoft.com/en-us/azure/cdn/cdn-overview","common_platform_enumeration":"","icon":"Azure.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"1fd3b2aa779c8f1927bab8b8769445c4","sha1":"8b571a65dc31df093d50d127bdae3ad98abc189a","sha256":"36e3ac238ee994b6991c018ed29b026eef42b97038b9a1cef3271773e773322b","sha512":"222c7ed68584146a4003758ff0a7acf2c5892c5a302c6841e62ca012474fbe3e4c6a48ff383918f0e21af6163ca3fc09c69bb25f2085d18f3ec4fe19278abc21","ssdeep":"192:TBeSr97qeDHUXE5BLG86Qv8at9DqGkWFyfZlQ7H:TBeM9O80XEHLGKv8at9D7kJfZQ","tlshash":"6e029e92701014281d2f21deb9a632b8ad3269ddaf1dab85b955e880b1503780e75bc5","first_seen":"2026-02-09T20:18:40.280447Z","last_seen":"2026-02-28T15:24:08.372133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}