{"report_id":"aec2dc91-33da-479c-a3a7-90d763c061db","version":6,"status":"done","tags":[],"date":"2026-05-28T08:58:36Z","url":{"schema":"https","addr":"vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"title":"Верно – Закон о возврате средств","dom":{"size":1520340,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"eded31ed1f152f80a5898d74ef13efd5","sha1":"8e3cccb6ff120d8b5685fae87352e67f425e2892","sha256":"20a00ff3e8f3fa23d41f961912eecd4dc007595309e67a02f63459b41e875cfb","sha512":"5c39fcdabf3c4c71274b57e167e9c0c32b4e0f21db4951e0509f0b5338beca7815851e11f3dd13e954bb835674217901274ceaf4ca3e4a7ef16375dbba746c31","ssdeep":"24576:eC0s0W7mFH9PLHTm6Q6hrGbCi9F3HiSwzjdAplkS:eC0s0WCFH9PLH66Q6hybCi9F3CSwzjdo","tlshash":"cf656cd5b2d5f4a503e301e6943b1001a33a2c1a740da468fbbcdcd7a96a58e6337f79","dom_hash":"domhashca18f44ad98926d056f000e8cf616abd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T08:58:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-28T08:58:14Z","timestamp":1779958694,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":55352,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-05-28T08:58:14.574964+0000\",\"flow_id\":602689199585353,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":55352,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":911,\"bytes_toclient\":3413,\"start\":\"2026-05-28T08:58:14.505929+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"maps.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3442,"first_seen":"2012-05-22T14:23:23Z","last_seen":"2026-05-25T07:29:14.456714Z","alert_count":0,"request_count":4,"received_data":755811,"sent_data":1831,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-5.jivosite.com","ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"domain_registered":"2011-05-06","domain_rank":1947235,"first_seen":"2023-01-18T15:13:00Z","last_seen":"2026-05-22T07:22:20.101669Z","alert_count":0,"request_count":2,"received_data":1670,"sent_data":979,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"files.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":900178,"first_seen":"2014-01-17T11:07:42Z","last_seen":"2026-05-26T21:21:58.418616Z","alert_count":0,"request_count":1,"received_data":13219,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vrnconsult.com","ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2026-05-22","domain_rank":0,"first_seen":"2026-05-28T08:58:45.589137Z","last_seen":"2026-05-28T08:58:45.589138Z","alert_count":0,"request_count":28,"received_data":4348047,"sent_data":24821,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"October CMS","description":"October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.","website":"https://octobercms.com","common_platform_enumeration":"","icon":"October CMS.png","categories":["CMS"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-05-21T22:07:40.305514Z","alert_count":0,"request_count":10,"received_data":2097910,"sent_data":4654,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":8,"received_data":303188,"sent_data":4280,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-05-27T18:05:04.167221Z","alert_count":0,"request_count":1,"received_data":930,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":11708,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"87.242.88.149","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":346139,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2026-05-21T22:07:40.418021Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vi-ya-6.jivosite.com","ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"domain_registered":"2011-05-06","domain_rank":898047,"first_seen":"2022-10-20T23:35:57Z","last_seen":"2026-05-26T19:35:49.086855Z","alert_count":0,"request_count":1,"received_data":241,"sent_data":585,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"9475d3e304796d5248f4bd0a504a9dd6","sha1":"cef17fb9908934b29e642297ff74ec80d4e6e21c","sha256":"b30650ea241142f3ff3c6b28ba9f91f9c15e25be90cffc4a60e4af851dae8d3a","sha512":"b14e9beb950a39152c99e498f3ff3acbfaa15f1ccb581ccf5c5509b9cd1eb7dd333e563853fa83edd15bd6ffa1c6f6ae056a89628635fa6a107a6912c7b2cf23","ssdeep":"","tlshash":"09f02b8c3c62b06337fa3679c2238e6f37a2070035c3a924c606cc2428a088a0896d8e","size":444,"data":"","first_seen":"2026-05-28T08:58:51.704142Z","last_seen":"2026-05-28T08:58:51.704142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/VYuYOwydE0","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c16a93671478a04e67ef6ce8fd8d49","sha1":"01b684e9d048b15a6db62c1089268153294c59e2","sha256":"e9e14e0a77b0bd6574ede9cad8679750cba46508846b46c6da140df5def3e9a2","sha512":"5bddfe37cf1714a45c8be3be1d26c0dfba9b05c59a438fd87322e2cfdeb34f6585c3b86c5ad28adb1e4e75bf812f10792a74a11cbe61e914e6e53a8bc5f1ce6d","ssdeep":"384:boUeJkQCuw6SmbXm0wrA8zuyEQ+EbzXDpGiqJISO9JHW8r08wI+xcXd4:vFj6x0A8z5EQ+EPXDe6/rp+xcXd4","tlshash":"51822a6e7959b93383b108f5a16f620a773549ebd404cc20a405f9897d78ade813fee8","size":18437,"data":"","first_seen":"2026-05-18T13:47:45.536253Z","last_seen":"2026-06-04T16:04:43.518197Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/intltelinput/js/intlTelInput.min.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"01edcb298fda576bff95f40beca6f7d5","sha1":"de84ef5cc0d846617643e3dc9a1ed2c528fdaad2","sha256":"6f542b6d2c49aa839955a676285129fc4f9b3e66490aeb6866cdfce661c272a9","sha512":"c2a25e63b98a659ad72ba82599533f4427075ee70c99f18a59a285833c35b7a2751c15b70771bbfc2b68967c6a50e308530afeb36e0559b006134064a20f4f5f","ssdeep":"768:d03XVqC/iPIfXpwJxiVYvjfaJiDrmkPbueIrFqDfNtikJb2kK9krGDZAENPKN2w5:3PIXVYvgiXPbuhkIkK1J8sGtb5H","tlshash":"dc23a76de394433aa8ff87f6b0d440429d5e76056a8048bc39bc9fcd52979d379a2338","size":48537,"data":"","first_seen":"2026-03-31T14:15:06.316446Z","last_seen":"2026-05-28T08:58:51.643222Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyBTY52Ak4lW1XEYGMCxdmda8cA5ygVbjoU\u0026callback=initMap","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7aae65e6a11b095bf75fe0fa927a3164","sha1":"3e79e92a780d515eb95c10a5f5cc8cc6bbff4d86","sha256":"6e5639ab56a5d088adac9f865748e7a8899ba84514fdfe8f8c3036388ee16da6","sha512":"d55e2c0fbc918ae083e49c142c143fb228fbb9bf0ef69a52babc50149543ba661204f54709e9d3cbc5c1786ef5bbebf8ffb72aff89d80d427f603396cba7a93d","ssdeep":"6144:Rb+B6AOpFTtZYGcx3fihgMDVGFRZ01qbG:RKB65XTtZYL3KiMMk1qbG","tlshash":"b5643e947362346287b3e4a4402b0106f27e645af04c8eacb6dcddf6aef594646b7f34","size":312969,"data":"","first_seen":"2026-05-28T08:58:51.62027Z","last_seen":"2026-05-28T08:58:51.62027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/intltelinput/js/utils.js?1562189064761","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe08d534771b8f87c4aacecf6ea59e6c","sha1":"30795a368e106849dba94486d7f93d94903e79b2","sha256":"1f205929f1167a2a075c1f24be1a67197d81a093e72f14566097556dfb9bae86","sha512":"6e1d8c32cf6dda5cd60cada3bd49576638710c7797529ef6d77b3f146f91b5f54076fdca1c53eb1660daaccc7e3ebce55a51948451de94a480ae3935ad1cc0b2","ssdeep":"3072:o/kW0LEIjOJ3PxPvJ3VxPyRxe3S3NsdM0M6R+8L9f61tQAMpBLPp54QPgSpVYrVZ:o/kWyE4pxlsdM0M6R74dJ","tlshash":"3944f0ebd67c9737a1d97b35968eb3cd1a8cbca3c848527826c3b54f52788e0716c205","size":265952,"data":"","first_seen":"2026-04-15T07:13:34.438903Z","last_seen":"2026-06-05T09:40:45.33125Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1779371255","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"07425c89db0ceec1c8bc484aff17ae6d","sha1":"d71f78d02d2c2ffb0b751d31c94c3bb080df3f36","sha256":"849296e986a812b53e41039867f9ac6b85103f7b6e21de6c5eeffd447daf509a","sha512":"a3762e8f9e5a43fbd289f336ebc3d4821e4bd62265622bc7f4f5943b3e12f32b68fd8c915ac39b91e23260112e65abe0da41cb2e85f9b83f2a77dc4dbc1dfd05","ssdeep":"24576:DcnR2K48WX9n4Aw/LuQhLMcgBVMmM5SsC/Td+SmgPgYlFqnH7XhHX6mW1kWUb:DcnR2h8WX9n4AwucgBVMmaSsC/T4SVlC","tlshash":"77755bc5b2c5f46103d355e6a03b2005b33a2859340da068bbbcdcdbe95a98e6377f79","size":1551945,"data":"","first_seen":"2026-05-21T22:07:47.991167Z","last_seen":"2026-06-02T09:41:22.090838Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"155c982ccfa005e623cb622dfa1073ae","sha1":"3736d5781934cae5a9541b0acc48371c720316f9","sha256":"99052d2a9f62a634dfe532786c3b00238049f60e2361a06dd981ab57ae7cc446","sha512":"c092c0d69b56c00a01299d83bccf9667c4c8c2f17f9c164eaf1f94d2e4a387f6983ad99d2b2088d02ddcbb19407924eb0bcb560151ffa54aaaf9676b8284cac3","ssdeep":"24576:cC0s0W7mFH9PLHTm6Q6hrGbCi9F3HiSwzjdAplkp:cC0s0WCFH9PLH66Q6hybCi9F3CSwzjd7","tlshash":"36656cd5b2d5f4a503e301e6943b1001a33a2c1a740da468fbbcdcd7a96a58e6337f79","size":1519477,"data":"","first_seen":"2026-05-21T22:07:47.99374Z","last_seen":"2026-06-02T09:41:22.091589Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/jaaulde-cookies/js/jaaulde-cookies.jquery.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a36ccc2dfdce7ef7043dc31517f60922","sha1":"193acf0008da125381b246b1a486133e5bb6365d","sha256":"8d75b7e6606a11d13705350dd5db5f54691871caa6a30c9fbc7208d6520020fe","sha512":"c0a36c10d463c967b04803a10e39025cff0bf6495d73045178fd69b57d327b4fb3699281be4438f761b0c0f2a28294645a5490e68e02c265fac490388713485d","ssdeep":"96:PMg4C/El/GzAkKmpzUR5DxZyb6UR5GnSz0X2syWNU6:PM6/e/GzAagR5DxmR5GnSwm7z6","tlshash":"8dd1016a3cdf700659b7a3749d5b8009fb728237211202d87cac62f05f31e18969bebd","size":6698,"data":"","first_seen":"2026-03-31T14:15:06.348698Z","last_seen":"2026-05-28T08:58:51.615273Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/js/script.min.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f98bb0454d8d404328e8b6c5596c2ad","sha1":"abc31bd908f5fae91fd67dfe90ebe5c12e127a7a","sha256":"382ade20cac976194669dac3b6d8ba3debbc777e2b6bc799e073b4b7b9788daf","sha512":"66ba5ba4548e884e78b3a575772b15781cd8db0229c2b33eb48c1b0c5e76b00eb641e6e9bd07a4ca73397a6f294255ad037a961be30999b8954b90df37d90dd8","ssdeep":"6144:48d3/5s/dzswQ47GKPD0oY74hLkwpqdGk8JFAjzEN:93Bs/5sJEh68JFAu","tlshash":"41743a897251743242eb51baa02f560fb237645da80a806cf57cc8de6db8d893177fbc","size":351158,"data":"","first_seen":"2026-03-31T14:15:06.332386Z","last_seen":"2026-05-28T08:58:51.601494Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?token=\u0026callback=jQuery34109876825537251535_1779958694106\u0026_=1779958694107","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"275f358683c0250fd4bfe1e1500e1a0d","sha1":"6b5ca7713f6df316ef49884d7e61c93d7c481121","sha256":"629f0f0fe074311c5adbf80cbcd847f6014b9fdad3de3f95f558cc52611123f3","sha512":"d97ad4fa2415cac3d53312ed42dcca34ddaa71405d3b880f2f03043c92eab798047cde0eda7b811aa442dc56a14b26b58f4b4091bce456162fccf5b0306266dc","ssdeep":"","tlshash":"7e019416263c1f3afebe464c44079a1e326a3d1f128171d64fa25b2c50556b7747066f","size":672,"data":"","first_seen":"2026-05-28T08:58:51.631946Z","last_seen":"2026-05-28T08:58:51.631946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/js/init.js?","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"41556090b5885b10164d266dee251d4d","sha1":"e9967bd416531a7a13e87e24d56d66ed9a282ef1","sha256":"1490223cb7549131c394ed79b9ae826879cffaba2c55f5bd462be0117b06e477","sha512":"0ceaba1c29268cce53fe6cae6bafa27ef7e878594ebc900aa17040ebe22d49707f0a288e4e230af234f75f4715c2b01c904dd39a7baca0d5249eee46ad6d2554","ssdeep":"","tlshash":"1071738b190485774873b376bbda4104faaa007b2450c7217dbc90942fb19c59fb2fe9","size":3820,"data":"","first_seen":"2026-03-31T14:15:06.343638Z","last_seen":"2026-05-28T08:58:51.643975Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/jaaulde-cookies/js/jaaulde-cookies.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"022c4617a426151eb1e493e4d2719f6e","sha1":"2fddffccc28a8acceca6cd903f70e2708e1b3dc9","sha256":"db8af068f34b18911a51f891f292fbb5f3271f6dfd3dac517f0d3c2e453c5307","sha512":"b0a9ffd632cbcc7b6909f44ff1b3d0f1e5589bcd61b34caa724a2da1e6e016e1f190a7d0dcae3cb7c7b63df8acbb459fc6389dfddb3a7d5db164c0a4f3c7eecc","ssdeep":"96:PhggIrE/10j8yRjy3vb/4+v+rTaSGn7Vw2pH0ZGowfGFGd71mPrQQH92oh24uf4q:PhaE/10XG4+v+r2SG7BccCSU7S","tlshash":"f962419d2ed620110873b3ba9f4a1049fb35e37b125921417dac96b01f71b648b7afbc","size":15297,"data":"","first_seen":"2026-03-22T23:19:53.850724Z","last_seen":"2026-05-28T08:58:51.64234Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0491b6cf554ba759b16d88fea84f4a3","sha1":"ddccb27f95bac6bbc7993c3ed6659d076099e769","sha256":"5afbc606bda58a9bfb2b9a10d000c6178d626cd83e5e9146d67c3994a253eccd","sha512":"c5aaca82cf7f3f1bc3ae2a2b6df12fa9a8b0260c94f362966483fbfc34d67f039a1e7cf3e3f62c44f6107e9962a5ec0849d3332cac19d8788f430efa79d5c443","ssdeep":"","tlshash":"52f0824db6f36823963f65306f7b650e1a2314971d52c9403c0e83d76f415b9db02ac9","size":472,"data":"","first_seen":"2026-03-31T14:15:06.358862Z","last_seen":"2026-05-28T08:58:51.719008Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/65/1c/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"145ed5052e012831c8e7b83fb28a37b0","sha1":"0693833214a475fe5c26c48c7edf8e72849d2735","sha256":"dc5eb7b7b790ae8525a21bfb522d8135a6c37d684d3c51bd77a047a83430da38","sha512":"baf0dbc627b01a9ba080fdd4d314897fbfe281051cb8c4ce1bfbd4db50822e271b7e7c583a8a56b1e1ad0b0dc32f1eb3ad98290d06556c593a52161d203fb8ed","ssdeep":"3072:nayGmELFBHO4NeeQPY/GW49+G5TEAEONlgsacj/AMXazUmr:naRT/Nlkt1Lgsn/AMXaz7r","tlshash":"cec3a5d5729371b3bf71e4a540970202b25aa49af41dcd2db1f9c9e3aef085601f9b38","size":126679,"data":"","first_seen":"2026-05-21T17:51:44.827582Z","last_seen":"2026-05-28T16:39:11.893416Z","times_seen":3301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/da8269d/locale-ru-RU-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0a17bc33baad08a86f3b4737cb8d385","sha1":"94e21428fe1fabb83f092301e9b2556c7ad5d419","sha256":"aa61c2a570e1e243ffd95dd0468f599ca8d22237cfaa9dee40fd4e44b9dd9f10","sha512":"c25ce8a3b433adc3628257a602d190c6de707e0f0f0528553c4f639c4fe9058087fa22a23cf882721f99a7d68e54bf03f4a762b613fb0d09a331c0b36b817a10","ssdeep":"192:CxqVzcShHYdx9j9ZQgQjHvsY3vGxMiWfrK6WOb2e+pnE8KZISoLe9+VviYNVG9K2:aUbU53b6Pnv7iWTMO+E8KZISoLeouK2","tlshash":"b1621d61468e74ea0205b05be8047f0b7bef41ff3faa53a549b45d7e35f2624823b10a","size":15104,"data":"","first_seen":"2026-05-14T13:05:10.405632Z","last_seen":"2026-06-06T16:39:39.961537Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/modules/system/assets/js/framework-extras.min.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c4dad1648b633dab67729b461fb985b","sha1":"a070cc9ed7087c25e5c1375598be7e45c8e341dc","sha256":"7ce2bd142bc5f636bd85e10fde0d10c40dca8dd237be92edceb9a6238701a647","sha512":"ac07c24de2c44e85c6d88ea85dc1ecee2407304f3f6da5626e35b533f7696ff39a91e4eab0334b94a062e67570930ddd4faf628f6e88f32428cc415a579edaf6","ssdeep":"1536:mc9e3BHDx9OtpjmpL4YWSutHDFa6F7KJjK4te26REQIjkHx8:FV0piVx8","tlshash":"85b3d79973d5b4b186c7a069142f620ab272342564c5c0a8f63ddcd6dff0e4da2a7f38","size":116380,"data":"","first_seen":"2025-10-10T15:07:03.279757Z","last_seen":"2026-05-28T08:58:51.626509Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/65/1c/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d711f1b8e31a6ef164bfffcef100436","sha1":"15050d83617db5077b7a59768b3b7a4b8b607c07","sha256":"38224b76dbe1beb21c84074f1fac048e8a0b930be32e5ed04d4831f9fb5de48f","sha512":"290f928a1b668661c402a4e0008287a3a9779d36789cbef355a6ea2e613354489eed4f9148c04f47872cd659dfe7af96ec0b1e50c1e1267be020e03f41ea1e35","ssdeep":"3072:BMUQaLhmo4gBPXlmvIUJG7NJG7A8kwyuZmBFIjb0KAi:B/QamsA6Ck8kxu0BF9Kz","tlshash":"ae64e77c72316b0ee973c85fc626300e90257ddbfad488bdeee55146ea54998f0e0a34","size":313393,"data":"","first_seen":"2026-05-21T17:51:44.83414Z","last_seen":"2026-05-28T16:39:11.804189Z","times_seen":3301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/da8269d/chatcontainer.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"65de467628403a1a6e310a534d6b9904","sha1":"2854ed04f81c725fc1fc37ecbd3cb9b041a36428","sha256":"c50bd08b8b6e5f11d3999ab4c55ec36dec03f8bb9d7195201efdce6594144dfc","sha512":"bd7af5d3c84b5ef172c72627447b18d035655ead08ee364e18a8d681522f6391048e21e51c36b7e2f03022d40cb7d2a332b2e7aa2088c457a1f9d1469be8134a","ssdeep":"3072:hZdFEkS33ObgLyXDeqTOCI0iDvV/GqrpZDJ12FKFHaq:433OMkTOCI0cv8WZL1aq","tlshash":"3e344bc1b1d0e87c46e741d9a03f1000b2292d2df409b9a8f3fcedda9b559893667b6d","size":248585,"data":"","first_seen":"2026-05-21T22:08:58.877236Z","last_seen":"2026-06-02T01:30:23.657151Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"0470f52ca4eab636c93c56560386d379","sha1":"63ab47a49a6a9ff0d6eef4ca475859b006f13195","sha256":"4290cdfedfc53dc055fd4a8d2cdb34defb9cf18be4c7a267d185af80755ad240","sha512":"305d89bfb97172068d8558c62c9ac9e549c4822ac6820b9f580187d435b6771628e5a99678a5268f30d7cd7c665ffe018ad4c15e792ba329ce2b2902b321ac17","ssdeep":"24576:2C0s0W7mFH9Pf3rmwO6E0vbCi953HiSzzjdApFGF:2C0s0WCFH9Pf3ywO6E0bCi953CSzzjd5","tlshash":"4e656cd5b2c5f4a507e301e6943b1002a33a2c1a740da468fbbcdcd7a95a58e6337f79","size":1517676,"data":"","first_seen":"2026-05-22T03:31:47.313128Z","last_seen":"2026-06-02T09:41:22.092346Z","times_seen":380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/common/logo.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/common/logo.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-1159\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4441,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6a2e77693d24e381992aa88baf1cc5ec","sha1":"724ab6d3a0d5cee570841dfe623f5d20f6547b45","sha256":"4a24fb65aeab4f5a5bc30e46d615352046efe90aa3d491b49dda40887ff8fe97","sha512":"a7a184ab52b4f264d0aaad789076f7046b7be2195891deaba2504ee716d9a244e6acb261a37d9d9db52762d8f25195d5fb82cb847ce3e81c40a30744bf0e84a7","ssdeep":"96:C9Ha2ysL6lmpdl4BAfR1tlnkvLcZUcY7B6lXM:+v7+uABAJXlkTciH7BV","tlshash":"ce9183e513dba2f0e901d7f88a3a50b97e0728f86f41c7a4c3b95dc5a94548e8c4eca4","first_seen":"2026-03-31T14:15:06.322332Z","last_seen":"2026-05-28T08:58:51.593015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/css/styles.min.css","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/css/styles.min.css HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-12b1d5\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1225173,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65321)","md5":"e4ced97bf56e1f6e53ec1878bf734117","sha1":"5f6d8be3a4746900f1b3caef6cb47bbef843dff3","sha256":"fbe91fd7df4429825770d5353aedd0deb0ea6f91bf418f55c46937bccfb0aac7","sha512":"f7e542daa674a640d4623b8b7bce4b547faaa5b4ee947cdb1f6321c725b52918e61f0d645aefac19f3c5ba626b557f387e7ba58ac2e36098d79c12a78934c580","ssdeep":"24576:FnblwbrZAwO12AZkaDb3ayg5JrMe60aTDKF+KFCgMi/V1tz7drW/XXL//PR7jzZM:lvKF+KFCgMi/V1tz7drW/XXL//PR7jze","tlshash":"e725a755f6c0105aaa13c61d81ccebb85b3fc542dba10eefb22776454bc61ca57a3b0e","first_seen":"2026-03-31T14:15:06.351031Z","last_seen":"2026-05-28T08:58:51.597229Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/js/script.min.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/js/script.min.js HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-55bb6\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":351158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"3f98bb0454d8d404328e8b6c5596c2ad","sha1":"abc31bd908f5fae91fd67dfe90ebe5c12e127a7a","sha256":"382ade20cac976194669dac3b6d8ba3debbc777e2b6bc799e073b4b7b9788daf","sha512":"66ba5ba4548e884e78b3a575772b15781cd8db0229c2b33eb48c1b0c5e76b00eb641e6e9bd07a4ca73397a6f294255ad037a961be30999b8954b90df37d90dd8","ssdeep":"6144:48d3/5s/dzswQ47GKPD0oY74hLkwpqdGk8JFAjzEN:93Bs/5sJEh68JFAu","tlshash":"41743a897251743242eb51baa02f560fb237645da80a806cf57cc8de6db8d893177fbc","first_seen":"2026-03-31T14:15:06.332386Z","last_seen":"2026-05-28T08:58:51.601494Z","times_seen":3,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/VYuYOwydE0","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /script/widget/config/VYuYOwydE0 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:14 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1517\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Thu, 28 May 2026 10:43:46 GMT\r\ntest: azazaz\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-28T08:43:46+00:00\r\nx-node: m9-up-gc8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4685,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"c765843f0ff0607b27be85329d24cbd0","sha1":"5517740ce1d202e5ec5b569e9b92eb0fdac82d76","sha256":"a0dc090f1b1baa25c63e7e0637aff829eb2cb38b9619564df516aa2372be9a1c","sha512":"fb19ae535f273e5cde29aab7ff0dabfab8b7603875e8ca8c6d08f5f84ba4cd90f89b11cd7ac847872f9a8f2187567f797477a43886470f43c3740cd9b223b669","ssdeep":"96:/ASv0Tf6BPiwlX+IV6lPkaByiwBamSEBIfDNCtDCpQhW:/AOofY/kZlRi4fDNWOT","tlshash":"a9a1aef394ea066e188975d2e7b77dce30e82a51c744cb3bcc3e5a6fe501610269271b","first_seen":"2026-05-28T08:58:51.604352Z","last_seen":"2026-05-28T08:58:51.604352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":133,"dns":1,"connect":62,"send":0,"wait":65,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/intltelinput/js/utils.js?1562189064761","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:15.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /plugins/btdev/intltelinput/assets/plugins/intltelinput/js/utils.js?1562189064761 HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/plugins/btdev/intltelinput/assets/js/init.js?\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D; btiticc=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 May 2025 09:39:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682d9f36-40ee0\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1903), with CRLF line terminators","md5":"fe08d534771b8f87c4aacecf6ea59e6c","sha1":"30795a368e106849dba94486d7f93d94903e79b2","sha256":"1f205929f1167a2a075c1f24be1a67197d81a093e72f14566097556dfb9bae86","sha512":"6e1d8c32cf6dda5cd60cada3bd49576638710c7797529ef6d77b3f146f91b5f54076fdca1c53eb1660daaccc7e3ebce55a51948451de94a480ae3935ad1cc0b2","ssdeep":"3072:o/kW0LEIjOJ3PxPvJ3VxPyRxe3S3NsdM0M6R+8L9f61tQAMpBLPp54QPgSpVYrVZ:o/kWyE4pxlsdM0M6R74dJ","tlshash":"3944f0ebd67c9737a1d97b35968eb3cd1a8cbca3c848527826c3b54f52788e0716c205","first_seen":"2026-04-15T07:13:34.438903Z","last_seen":"2026-06-05T09:40:45.33125Z","times_seen":9,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/65/1c/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:20.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /maps-api-v3/api/js/65/1c/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37690\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 25 May 2026 09:00:59 GMT\r\nexpires: Tue, 25 May 2027 09:00:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 May 2026 08:17:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 259041\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126679,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1578)","md5":"145ed5052e012831c8e7b83fb28a37b0","sha1":"0693833214a475fe5c26c48c7edf8e72849d2735","sha256":"dc5eb7b7b790ae8525a21bfb522d8135a6c37d684d3c51bd77a047a83430da38","sha512":"baf0dbc627b01a9ba080fdd4d314897fbfe281051cb8c4ce1bfbd4db50822e271b7e7c583a8a56b1e1ad0b0dc32f1eb3ad98290d06556c593a52161d203fb8ed","ssdeep":"3072:nayGmELFBHO4NeeQPY/GW49+G5TEAEONlgsacj/AMXazUmr:naRT/Nlkt1Lgsn/AMXaz7r","tlshash":"cec3a5d5729371b3bf71e4a540970202b25aa49af41dcd2db1f9c9e3aef085601f9b38","first_seen":"2026-05-21T17:51:44.827582Z","last_seen":"2026-05-28T16:39:11.893416Z","times_seen":3301,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/src/icon-material/material-icons.css","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/src/icon-material/material-icons.css HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-3ca\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":970,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c5941eed2e20a509114128aab1e96edf","sha1":"d45506350e35c369dca6d1ed299b3688e590db8d","sha256":"afb727c828f3957ada8e546f9bce9c9c733bc1d2f09a83eb47f2114302cd9f2b","sha512":"4c14c94f4c86c4797b2451002f5bbdc14ce8d1e2be1bd643ebfb426b5615574312d2c0aa4e48ac809f4e0ba0b74c415c382f9dbe2be9d486c6a7e73a07458c16","ssdeep":"","tlshash":"3f115e096dd9208b44510ca5b78b3f054a09113f580ac8efa6591b0c0effa7a53bd75f","first_seen":"2023-04-20T14:13:30Z","last_seen":"2026-06-05T15:20:59.070633Z","times_seen":408,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/jaaulde-cookies/js/jaaulde-cookies.jquery.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /plugins/btdev/intltelinput/assets/plugins/jaaulde-cookies/js/jaaulde-cookies.jquery.js HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 May 2025 09:39:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682d9f36-1a2a\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a36ccc2dfdce7ef7043dc31517f60922","sha1":"193acf0008da125381b246b1a486133e5bb6365d","sha256":"8d75b7e6606a11d13705350dd5db5f54691871caa6a30c9fbc7208d6520020fe","sha512":"c0a36c10d463c967b04803a10e39025cff0bf6495d73045178fd69b57d327b4fb3699281be4438f761b0c0f2a28294645a5490e68e02c265fac490388713485d","ssdeep":"96:PMg4C/El/GzAkKmpzUR5DxZyb6UR5GnSz0X2syWNU6:PM6/e/GzAagR5DxmR5GnSwm7z6","tlshash":"8dd1016a3cdf700659b7a3749d5b8009fb728237211202d87cac62f05f31e18969bebd","first_seen":"2026-03-31T14:15:06.348698Z","last_seen":"2026-05-28T08:58:51.615273Z","times_seen":9,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/intltelinput/img/flags.webp","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /plugins/btdev/intltelinput/assets/plugins/intltelinput/img/flags.webp HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/combine/9bc51925f71977b79e29e146fc2faa4c-1747820342\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28186\r\nlast-modified: Wed, 21 May 2025 09:39:02 GMT\r\netag: \"682d9f36-6e1a\"\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-06-06T17:11:25.010503Z","times_seen":2571,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/home/hero-img.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/home/hero-img.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-4c8f\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19599,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4ac1cbd0edb1a01f4dc8187da4a2471","sha1":"0bd1eb211556a8f14ef1095b35e3c35f12fdff6f","sha256":"0198fde5923f8e0e8c4f89f359552a15245c4ec1357cc3007a9d05cb07c125d6","sha512":"183dadb7804a19d2d561a83967efe65051c5f56bfa356b06980a263fccc3f82e4671ae9eb7c41efaf3e24a16235b78d02480dd0765e3016c84281a2bed6aff14","ssdeep":"384:C4DsQLayUYKXo8oCzuTAb4CneVTdjXLQcY2W1y7yBjVAK5LzTrKSxx:VDs9LznJneVTdjXscYN1y7ojZLTH","tlshash":"2a9251cc2b795ce58ac00bc9bf0294f82103a9fb59114e4ec21c5b3d69e5c2e7d2bad5","first_seen":"2026-03-31T14:15:06.354343Z","last_seen":"2026-05-28T08:58:51.617867Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/js?key=AIzaSyBTY52Ak4lW1XEYGMCxdmda8cA5ygVbjoU\u0026callback=initMap","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /maps/api/js?key=AIzaSyBTY52Ak4lW1XEYGMCxdmda8cA5ygVbjoU\u0026callback=initMap HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\ntiming-allow-origin: *\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: b35cf009\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ndate: Thu, 28 May 2026 08:58:14 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 102814\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=28\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":312969,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12098)","md5":"7aae65e6a11b095bf75fe0fa927a3164","sha1":"3e79e92a780d515eb95c10a5f5cc8cc6bbff4d86","sha256":"6e5639ab56a5d088adac9f865748e7a8899ba84514fdfe8f8c3036388ee16da6","sha512":"d55e2c0fbc918ae083e49c142c143fb228fbb9bf0ef69a52babc50149543ba661204f54709e9d3cbc5c1786ef5bbebf8ffb72aff89d80d427f603396cba7a93d","ssdeep":"6144:Rb+B6AOpFTtZYGcx3fihgMDVGFRZ01qbG:RKB65XTtZYL3KiMMk1qbG","tlshash":"b5643e947362346287b3e4a4402b0106f27e645af04c8eacb6dcddf6aef594646b7f34","first_seen":"2026-05-28T08:58:51.62027Z","last_seen":"2026-05-28T08:58:51.62027Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:15.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Thu, 28 May 2026 08:58:15 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 23\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://vrnconsult.com\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=1\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-06-06T17:12:36.286831Z","times_seen":407111,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1779371255","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:20.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/bundle.js?rand=1779371255 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 342498\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-539e2\"\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-27T11:18:06+00:00\r\nx-node: m9p-up-gc58\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1551945,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d335b09bd80d314cae6eff2a112fd378","sha1":"b0501f2069f3cff4589423f4dfa928696855bbcb","sha256":"95a62828cfb2dfcccd5b2fe9f49737a2023658b7c6c18e3ba2741d66d7a2c29a","sha512":"7dff5fec411fe138760b26762015e8bc3e0b0a0e77288f8f478397134073d5deb066bda519d43a6b06eea49d75907e5ff8348c58d57416ce17c131ef3aab898f","ssdeep":"24576:DcnR2K48WX9n4Aw/LuQhLMcgBVMmM5SsC/Td+SA:DcnR2h8WX9n4AwucgBVMmaSsC/T4SA","tlshash":"a1255bc5b1c1f46503d355e6603b2009b23b285e7809b064babcddcafa6759e6233f79","first_seen":"2026-05-21T22:08:58.783028Z","last_seen":"2026-06-02T09:41:22.083356Z","times_seen":408,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/da8269d/chatcontainer.widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:31.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /css/da8269d/chatcontainer.widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 22620\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"6a0dbb3b-585c\"\r\nexpires: Sun, 31 May 2026 13:54:13 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-21T13:54:13+00:00\r\nx-node: m9p-up-gc90\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101417,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c2c5c3cbce97025bd87d66dd5e463e5e","sha1":"d8eddb9d50d3ca5f86f7c9df8bed25afb5a8c58f","sha256":"30072d2f0346d540ed5b2d539830a1e1ea5af8462712f6f9a155919edf433fbf","sha512":"f326013e0a0ddb24084009a1db12f2bd7d052e9dc96de10d5be5959b1ca24fd9d9b89386547ab761bf111cc96825636ad1e4dcc454c41891a21b531b77b64426","ssdeep":"1536:CH41BZSDKou/1SiitUDTO5Ell5DNkNv6utEP:h51EDg","tlshash":"66a3d562f6d1253db02b8136e9e2e7b8693dd012db232fbae644b334c7c65d71722509","first_seen":"2026-05-21T22:08:58.91129Z","last_seen":"2026-06-02T01:30:23.727828Z","times_seen":77,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/modules/system/assets/js/framework-extras.min.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /modules/system/assets/js/framework-extras.min.js HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 May 2025 00:39:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68292c30-1c69c\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3c4dad1648b633dab67729b461fb985b","sha1":"a070cc9ed7087c25e5c1375598be7e45c8e341dc","sha256":"7ce2bd142bc5f636bd85e10fde0d10c40dca8dd237be92edceb9a6238701a647","sha512":"ac07c24de2c44e85c6d88ea85dc1ecee2407304f3f6da5626e35b533f7696ff39a91e4eab0334b94a062e67570930ddd4faf628f6e88f32428cc415a579edaf6","ssdeep":"1536:mc9e3BHDx9OtpjmpL4YWSutHDFa6F7KJjK4te26REQIjkHx8:FV0piVx8","tlshash":"85b3d79973d5b4b186c7a069142f620ab272342564c5c0a8f63ddcd6dff0e4da2a7f38","first_seen":"2025-10-10T15:07:03.279757Z","last_seen":"2026-05-28T08:58:51.626509Z","times_seen":14,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 09:21:02 GMT\r\nexpires: Thu, 27 May 2027 09:21:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 85032\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-06-06T15:36:06.270813Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/65/1c/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:20.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /maps-api-v3/api/js/65/1c/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70531\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 17:31:37 GMT\r\nexpires: Thu, 27 May 2027 17:31:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 55603\r\nlast-modified: Wed, 20 May 2026 08:17:14 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":313393,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (523)","md5":"0d711f1b8e31a6ef164bfffcef100436","sha1":"15050d83617db5077b7a59768b3b7a4b8b607c07","sha256":"38224b76dbe1beb21c84074f1fac048e8a0b930be32e5ed04d4831f9fb5de48f","sha512":"290f928a1b668661c402a4e0008287a3a9779d36789cbef355a6ea2e613354489eed4f9148c04f47872cd659dfe7af96ec0b1e50c1e1267be020e03f41ea1e35","ssdeep":"3072:BMUQaLhmo4gBPXlmvIUJG7NJG7A8kwyuZmBFIjb0KAi:B/QamsA6Ck8kxu0BF9Kz","tlshash":"ae64e77c72316b0ee973c85fc626300e90257ddbfad488bdeee55146ea54998f0e0a34","first_seen":"2026-05-21T17:51:44.83414Z","last_seen":"2026-05-28T16:39:11.804189Z","times_seen":3301,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-5.jivosite.com/widget/status/807105/VYuYOwydE0/f132bd4b64a660d6?","fqdn":"node-ya-5.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:31.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/status/807105/VYuYOwydE0/f132bd4b64a660d6? HTTP/1.1\r\nHost: node-ya-5.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: 5.252.32.145\r\ndate: Thu, 28 May 2026 08:58:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://vrnconsult.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"17fa8da05c3b64f0579ba3df2cfa0950","sha1":"1f6b7b7a9c03d6fc4cf5a2d5f602a26f7d59c2d1","sha256":"9a17ab75b1d895525163647394030a29606696ef07c3f1579e738564c803c2b3","sha512":"20e899078ec89e23dd3fc9e4e29f709ef8564479a388a598f0102fc1b0c4d03a4a86a1c12f1fb2809dba06cd95c7813dd3ce829ed0e267ddc1e3a3237af6ea0b","ssdeep":"","tlshash":"84d02236422418b783849248e0cb3f830a3d14a22ac38a28a632fe10a0ae8a2425c447","first_seen":"2026-03-31T14:15:06.304172Z","last_seen":"2026-05-28T08:58:51.629524Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/common/favicon.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/common/favicon.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D; btiticc=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-1ce\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fb9a0cccd5ac3a53c81ba9b3ab2bc97","sha1":"7c7187383541a008af7fd208e5e95be653715c44","sha256":"a194279dbdea8e3eee6cab33941791664eafd5d9b5a2d1e645d39888d4741adb","sha512":"9ac8778f35568d67d8193134c46501d0a9619324efef4ac24854df0db7105e327e5575836fbabbf2a226b50bdee227f4ae64c9b3c80488c5ac3590e176067ff9","ssdeep":"","tlshash":"23f0dcb6938ccd08c5c9c7b6aa2810c53cf718a8a5380294a94163153245a91df3d2b2","first_seen":"2026-03-31T14:15:06.338307Z","last_seen":"2026-05-28T08:58:51.630554Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 09:21:02 GMT\r\nexpires: Thu, 27 May 2027 09:21:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 85032\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-06-06T15:36:06.270813Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":131,"dns":1,"connect":14,"send":0,"wait":15,"receive":7,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 09:21:02 GMT\r\nexpires: Thu, 27 May 2027 09:21:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 85032\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-06-06T15:36:06.270813Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?token=\u0026callback=jQuery34109876825537251535_1779958694106\u0026_=1779958694107","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 16:36:00 GMT","end":"Sat, 01 Aug 2026 16:35:59 GMT"},"fingerprint":{"sha1":"06:75:C4:FB:38:6E:E1:2E:FA:EB:1F:53:64:D4:A8:68:81:AA:9A:4A","sha256":"74:4A:07:24:C9:DA:4C:BA:4E:1D:C1:1D:2D:9D:6B:AD:65:55:3E:08:89:78:B2:E0:36:DF:14:3D:B1:7E:BD:21"}}},"request":{"raw":"GET /?token=\u0026callback=jQuery34109876825537251535_1779958694106\u0026_=1779958694107 HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ndate: Thu, 28 May 2026 08:58:14 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":672,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (391)","md5":"275f358683c0250fd4bfe1e1500e1a0d","sha1":"6b5ca7713f6df316ef49884d7e61c93d7c481121","sha256":"629f0f0fe074311c5adbf80cbcd847f6014b9fdad3de3f95f558cc52611123f3","sha512":"d97ad4fa2415cac3d53312ed42dcca34ddaa71405d3b880f2f03043c92eab798047cde0eda7b811aa442dc56a14b26b58f4b4091bce456162fccf5b0306266dc","ssdeep":"","tlshash":"7e019416263c1f3afebe464c44079a1e326a3d1f128171d64fa25b2c50556b7747066f","first_seen":"2026-05-28T08:58:51.631946Z","last_seen":"2026-05-28T08:58:51.631946Z","times_seen":1,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":91,"dns":12,"connect":26,"send":0,"wait":151,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/da8269d/locale-ru-RU-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:20.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/da8269d/locale-ru-RU-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4230\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-1086\"\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-27T10:28:55+00:00\r\nx-node: m9p-up-gc54\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15516,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10460), with no line terminators","md5":"f0a17bc33baad08a86f3b4737cb8d385","sha1":"94e21428fe1fabb83f092301e9b2556c7ad5d419","sha256":"aa61c2a570e1e243ffd95dd0468f599ca8d22237cfaa9dee40fd4e44b9dd9f10","sha512":"c25ce8a3b433adc3628257a602d190c6de707e0f0f0528553c4f639c4fe9058087fa22a23cf882721f99a7d68e54bf03f4a762b613fb0d09a331c0b36b817a10","ssdeep":"192:CxqVzcShHYdx9j9ZQgQjHvsY3vGxMiWfrK6WOb2e+pnE8KZISoLe9+VviYNVG9K2:aUbU53b6Pnv7iWTMO+E8KZISoLeouK2","tlshash":"b1621d61468e74ea0205b05be8047f0b7bef41ff3faa53a549b45d7e35f2624823b10a","first_seen":"2026-05-14T13:05:10.405632Z","last_seen":"2026-06-06T16:39:39.961537Z","times_seen":643,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/home/benefit-4.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/home/benefit-4.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-24e\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02309ee083240b034b2fbd1c76fe1af3","sha1":"9588eefa8b98bff4a83a58b3f6a51b68d9a69978","sha256":"9b38e5452f7417e3064c134515cda4f492746b030c54aa4f4e727e7e44cde909","sha512":"7d49188ca8abf37965a690be0cceea999a5c0d5f187cc7acef89adfaaf58151b98022cb279d8b1ce115cf58f80516e229a77e8c7352eed9b8599895902478efa","ssdeep":"","tlshash":"f8f062582b0c1d3c64a0931bb324393cd45d54e235d91de9ca76b4b60933d6d5cbb899","first_seen":"2026-03-31T14:15:06.313021Z","last_seen":"2026-05-28T08:58:51.634613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/da8269d/chatcontainer.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:31.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/da8269d/chatcontainer.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 61938\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-f1f2\"\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-27T13:54:56+00:00\r\nx-node: m9p-up-gc68\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248585,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"65de467628403a1a6e310a534d6b9904","sha1":"2854ed04f81c725fc1fc37ecbd3cb9b041a36428","sha256":"c50bd08b8b6e5f11d3999ab4c55ec36dec03f8bb9d7195201efdce6594144dfc","sha512":"bd7af5d3c84b5ef172c72627447b18d035655ead08ee364e18a8d681522f6391048e21e51c36b7e2f03022d40cb7d2a332b2e7aa2088c457a1f9d1469be8134a","ssdeep":"3072:hZdFEkS33ObgLyXDeqTOCI0iDvV/GqrpZDJ12FKFHaq:433OMkTOCI0cv8WZL1aq","tlshash":"3e344bc1b1d0e87c46e741d9a03f1000b2292d2df409b9a8f3fcedda9b559893667b6d","first_seen":"2026-05-21T22:08:58.877236Z","last_seen":"2026-06-02T01:30:23.657151Z","times_seen":77,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T08:58:13.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\nset-cookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D; expires=Thu, 28 May 2026 10:58:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"October CMS","description":"October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.","website":"https://octobercms.com","common_platform_enumeration":"","icon":"October CMS.png","categories":["CMS"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}],"data":{"size":45036,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (341), with LF, NEL line terminators","md5":"4d74e94b386bfe888a4fac905d317401","sha1":"110a3e20f3926649f430869fd785dd93bdcbb72e","sha256":"c9265e53737cbdb17bbc66f24e9ec561c7ac8943651dc825aec084fc26c540e2","sha512":"ce81304ec30af6df1ec3073f83f7ed16b1ca6625987bb7e089503bc5119afb701b90e586c220ce514a57337cf04d082c1060661cf264168d56d0c1630c3970bb","ssdeep":"384:TiT9vQFxRqqNjshPbcTPNokg0SM8R4ISfj0nyF8uvT8M:TFrVNjshPYNoN0Sr4hf4yF/vTf","tlshash":"a8235322b1f5542711aa8c66b9182b09fdd8d827da8f4ad771bc979c6fc5dc38a1330c","first_seen":"2026-05-28T08:58:51.640368Z","last_seen":"2026-05-28T08:58:51.640368Z","times_seen":1,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":103,"dns":42,"connect":27,"send":0,"wait":89,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/jaaulde-cookies/js/jaaulde-cookies.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /plugins/btdev/intltelinput/assets/plugins/jaaulde-cookies/js/jaaulde-cookies.js HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 May 2025 09:39:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682d9f36-3bc1\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"022c4617a426151eb1e493e4d2719f6e","sha1":"2fddffccc28a8acceca6cd903f70e2708e1b3dc9","sha256":"db8af068f34b18911a51f891f292fbb5f3271f6dfd3dac517f0d3c2e453c5307","sha512":"b0a9ffd632cbcc7b6909f44ff1b3d0f1e5589bcd61b34caa724a2da1e6e016e1f190a7d0dcae3cb7c7b63df8acbb459fc6389dfddb3a7d5db164c0a4f3c7eecc","ssdeep":"96:PhggIrE/10j8yRjy3vb/4+v+rTaSGn7Vw2pH0ZGowfGFGd71mPrQQH92oh24uf4q:PhaE/10XG4+v+r2SG7BccCSU7S","tlshash":"f962419d2ed620110873b3ba9f4a1049fb35e37b125921417dac96b01f71b648b7afbc","first_seen":"2026-03-22T23:19:53.850724Z","last_seen":"2026-05-28T08:58:51.64234Z","times_seen":10,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/plugins/intltelinput/js/intlTelInput.min.js","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /plugins/btdev/intltelinput/assets/plugins/intltelinput/js/intlTelInput.min.js HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 May 2025 09:39:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682d9f36-bd99\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4437), with CRLF line terminators","md5":"01edcb298fda576bff95f40beca6f7d5","sha1":"de84ef5cc0d846617643e3dc9a1ed2c528fdaad2","sha256":"6f542b6d2c49aa839955a676285129fc4f9b3e66490aeb6866cdfce661c272a9","sha512":"c2a25e63b98a659ad72ba82599533f4427075ee70c99f18a59a285833c35b7a2751c15b70771bbfc2b68967c6a50e308530afeb36e0559b006134064a20f4f5f","ssdeep":"768:d03XVqC/iPIfXpwJxiVYvjfaJiDrmkPbueIrFqDfNtikJb2kK9krGDZAENPKN2w5:3PIXVYvgiXPbuhkIkK1J8sGtb5H","tlshash":"dc23a76de394433aa8ff87f6b0d440429d5e76056a8048bc39bc9fcd52979d379a2338","first_seen":"2026-03-31T14:15:06.316446Z","last_seen":"2026-05-28T08:58:51.643222Z","times_seen":9,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/plugins/btdev/intltelinput/assets/js/init.js?","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /plugins/btdev/intltelinput/assets/js/init.js? HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 May 2025 09:39:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682d9f36-eec\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3820,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"41556090b5885b10164d266dee251d4d","sha1":"e9967bd416531a7a13e87e24d56d66ed9a282ef1","sha256":"1490223cb7549131c394ed79b9ae826879cffaba2c55f5bd462be0117b06e477","sha512":"0ceaba1c29268cce53fe6cae6bafa27ef7e878594ebc900aa17040ebe22d49707f0a288e4e230af234f75f4715c2b01c904dd39a7baca0d5249eee46ad6d2554","ssdeep":"","tlshash":"1071738b190485774873b376bbda4104faaa007b2450c7217dbc90942fb19c59fb2fe9","first_seen":"2026-03-31T14:15:06.343638Z","last_seen":"2026-05-28T08:58:51.643975Z","times_seen":9,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/home/staff-img.webp","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/home/staff-img.webp HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2086228\r\nlast-modified: Tue, 16 Dec 2025 14:45:34 GMT\r\netag: \"6941708e-1fd554\"\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2086228,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4735135643188297df99704decef423","sha1":"b27894bc1e2549e87eaaf8b77c5c00d84d33180f","sha256":"41c52420a8e64597e63d8033e92af61069d92a674915594e76b97523e2903c74","sha512":"8b00154913e012f4c38ac34c565e70a9bcd5a40ed250858f4da4c3d0ee7f7bcffac636f20ef294e0a34c1b11bc09ef28225681b421149fbf171f8d0cdaad30a3","ssdeep":"24576:WokEhqLknLiavDARUvfxGiWLA5YW3lK4wTseXqz05HPmTN:WpEhqLEiavURUvfNWMKYlBu0g9PwN","tlshash":"18253352a68456fb02fe0eea04fc16e19d8d83f3479af0e5c4ed03ea9c476e99017497","first_seen":"2026-05-28T08:58:51.644885Z","last_seen":"2026-05-28T08:58:51.644885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/VYuYOwydE0","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/VYuYOwydE0 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:14 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6307\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-18a3\"\r\nexpires: Thu, 28 May 2026 10:58:14 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc89\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18437), with no line terminators","md5":"d9c16a93671478a04e67ef6ce8fd8d49","sha1":"01b684e9d048b15a6db62c1089268153294c59e2","sha256":"e9e14e0a77b0bd6574ede9cad8679750cba46508846b46c6da140df5def3e9a2","sha512":"5bddfe37cf1714a45c8be3be1d26c0dfba9b05c59a438fd87322e2cfdeb34f6585c3b86c5ad28adb1e4e75bf812f10792a74a11cbe61e914e6e53a8bc5f1ce6d","ssdeep":"384:boUeJkQCuw6SmbXm0wrA8zuyEQ+EbzXDpGiqJISO9JHW8r08wI+xcXd4:vFj6x0A8z5EQ+EPXDe6/rp+xcXd4","tlshash":"51822a6e7959b93383b108f5a16f620a773549ebd404cc20a405f9897d78ade813fee8","first_seen":"2026-05-18T13:47:45.536253Z","last_seen":"2026-06-04T16:04:43.518197Z","times_seen":717,"resource_available":true,"data":null}},"time_used":874,"timings":{"blocked":374,"dns":60,"connect":58,"send":0,"wait":101,"receive":1,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:55:08 GMT\r\nexpires: Sat, 22 May 2027 13:55:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 500586\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-06T17:23:08.438165Z","times_seen":54615,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":73,"dns":4,"connect":15,"send":0,"wait":40,"receive":8,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-5.jivosite.com/widget/status/807105/VYuYOwydE0?rnd=0.9482621399219191","fqdn":"node-ya-5.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/status/807105/VYuYOwydE0?rnd=0.9482621399219191 HTTP/1.1\r\nHost: node-ya-5.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: 5.252.32.145\r\ndate: Thu, 28 May 2026 08:58:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://vrnconsult.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"17fa8da05c3b64f0579ba3df2cfa0950","sha1":"1f6b7b7a9c03d6fc4cf5a2d5f602a26f7d59c2d1","sha256":"9a17ab75b1d895525163647394030a29606696ef07c3f1579e738564c803c2b3","sha512":"20e899078ec89e23dd3fc9e4e29f709ef8564479a388a598f0102fc1b0c4d03a4a86a1c12f1fb2809dba06cd95c7813dd3ce829ed0e267ddc1e3a3237af6ea0b","ssdeep":"","tlshash":"84d02236422418b783849248e0cb3f830a3d14a22ac38a28a632fe10a0ae8a2425c447","first_seen":"2026-03-31T14:15:06.304172Z","last_seen":"2026-05-28T08:58:51.629524Z","times_seen":3,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":115,"dns":46,"connect":20,"send":0,"wait":73,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.jivosite.com/avatars/807105/67b5c619b083c.jpg","fqdn":"files.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:32.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /avatars/807105/67b5c619b083c.jpg HTTP/1.1\r\nHost: files.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12657\r\nx-obs-request-id: 000001951EC93A8AA0E7835D9CDFA98D\r\netag: \"4fda6d5585acfaa41b25aefcd5c1ff66\"\r\nlast-modified: Wed, 19 Feb 2025 11:52:57 GMT\r\nx-obs-tagging-count: 0\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Disposition\r\ncache: HIT\r\nx-cached-since: 2026-05-25T12:29:29+00:00\r\nx-node: m9p-up-gc71\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12657,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3","md5":"4fda6d5585acfaa41b25aefcd5c1ff66","sha1":"eac920717a7a4bd66b83229ab9f3691a90e871ac","sha256":"1aeea4866fb3a4a48126c81218b703e0f4e1ce9baffc379e793d1f6c4443c267","sha512":"df678967f997b0b61a8fd2df190a034c111e7a5a90b6ce30e9fc4a40d770ca29d57ac66036284b0309d453495c0fb0ab94fd60f04f23574c6152ce24f7b1b6c8","ssdeep":"384:ggyq0/wGOtVpZzazFcAAS+FDP+YpjrD3mqluFvW:ggyq0/QVpZuRcAAXFDmYpnD2qluE","tlshash":"3d42bebbaec0c5adcb00877f40cc8559f2694ae72189a5bd05434ef49ac58fb6c8d3c9","first_seen":"2026-05-28T08:58:51.647898Z","last_seen":"2026-05-28T08:58:51.647898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/combine/9bc51925f71977b79e29e146fc2faa4c-1747820342","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /combine/9bc51925f71977b79e29e146fc2faa4c-1747820342 HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: max-age=15768000, public\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\nlast-modified: Wed, 21 May 2025 09:39:02 GMT\r\netag: W/\"9bc51925f71977b79e29e146fc2faa4c\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14919,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (13674)","md5":"b166f452f694f3cc6bc177ac9b66a9e4","sha1":"8d83a92a63a3f465f20eaabadf089a6917bd2fa5","sha256":"c26cc380a5be1ade51fed76ebe6e28d6e42c5e4819ed891998fc3328c62616d6","sha512":"b9553f2765d489093ec2f979bb9de86a6f03ae97123687efb67ae94709f7d90e30f9fcf744b36a2293aec57f7b3396e57fddbeb0b8e7884698b7798e1e2687e1","ssdeep":"192:ePvrn1ro59fdOkOFhs+bpmTYCM9oRZJiEnJWoCdsPyj9KKa2G4xJlUG:4qckOEM7LkG","tlshash":"16628513030c952ee712c1397162d5fc3bffab4174d6cae1e6d8821f98879908dabe59","first_seen":"2026-03-31T14:15:06.319381Z","last_seen":"2026-05-28T08:58:51.649226Z","times_seen":9,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:55:08 GMT\r\nexpires: Sat, 22 May 2027 13:55:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 500586\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-06T17:23:08.438165Z","times_seen":54615,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":18,"receive":26,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/src/icon-material/MaterialIcons-Regular.woff2","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/src/icon-material/MaterialIcons-Regular.woff2 HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/themes/verno/assets/src/icon-material/material-icons.css\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 44300\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\netag: \"6941708d-ad0c\"\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44300,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44300, version 1.720","md5":"570eb83859dc23dd0eec423a49e147fe","sha1":"09963592e8c953cc7e14e3fb0a5b05d5042e8435","sha256":"a87d66c91b2e7dc5530aef76c03bd6a3d25ea5826110bf4803b561b811cc8726","sha512":"baa17185bedd1f04b138a1de3741b7a6052a02c1d4848d5359ae3ecc80061c54df63374684571bb50b1392af4458f1df7a5df634716fd5fb269ec7f63f3f65d1","ssdeep":"768:O89JwtxcrQZ3QokCTF/wNDItCKrXnQRSC88gWR29D32ashbOfe5rFZwvhy8k03Xm:O8nQRHkGF/w6trX5ZWRQXcVFZwo8kkm","tlshash":"3513f1259c805118e855bfde827ff162f2a3fb8705c16d120bbb4d696a4822b58376d8","first_seen":"2023-04-08T11:04:01Z","last_seen":"2026-06-06T15:24:36.923985Z","times_seen":8389,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:21.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6a0ad858-eb0\"\r\nexpires: Fri, 19 Jun 2026 11:27:34 GMT\r\nlast-modified: Mon, 18 May 2026 09:14:00 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-20T11:27:34+00:00\r\nx-node: m9p-up-gc8\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T16:39:39.962122Z","times_seen":16380,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Raleway:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 28 May 2026 08:58:13 GMT\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11022,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"035c506a60e9fc686218cd3e5743c86a","sha1":"71ddd1ee9d7470a3339e748795cfdea5867a08ae","sha256":"3598d554b2d979cc08c1a8b3cca6b9cdb17372c521b3c3c70ca2679c88f86072","sha512":"f045bdf98faf3ac382cd74335599fed13db5b583df630db6ea8dc501e61e03769cca3fef3071d28134cda4e76b23a065ddc57798fc613b902b27cb01bd4b1e7d","ssdeep":"192:4ioTRH+DO9ivTiH9DN0iST/H0DEbiBT4HbDryiUTtHyDChi7TuHhDxp:lStobcFwf+JmT2RkvgF","tlshash":"d33298a00917d000eb47acc663ce7f36ee5e62053046857e9bfd58f8acaad361394b0d","first_seen":"2025-09-11T14:15:47.823417Z","last_seen":"2026-05-31T18:56:42.220012Z","times_seen":147,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":124,"dns":6,"connect":15,"send":0,"wait":18,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/common/check.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/common/check.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-f0\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":240,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b20ad968bb1cd1a664c99caabc0d167","sha1":"5342c97f69bdd61cdfe6c77c52ecc817ab17353f","sha256":"d828f0fb4d3a263202b31e46a2439d70be7570c05f31b6a457595c714922a2ff","sha512":"830628822d915ab0382e5a44837694355bd43751f3c08c7150f7a8fb0d5ade00706ff42239060f4923ae2427c8aa7efe477280e33bf5ad6cfc1c310f19a72be1","ssdeep":"","tlshash":"d0d0a72913081c2cf2204730f354373560bb11c33585d995ed612530526469ffd779e9","first_seen":"2026-03-31T14:15:06.345588Z","last_seen":"2026-05-28T08:58:51.652476Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:55:08 GMT\r\nexpires: Sat, 22 May 2027 13:55:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 500586\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-06T17:23:08.438165Z","times_seen":54615,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":92,"dns":1,"connect":32,"send":0,"wait":29,"receive":2,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:21.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69ef3c39-1396\"\r\nexpires: Sun, 31 May 2026 23:30:03 GMT\r\nlast-modified: Mon, 27 Apr 2026 10:36:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-01T23:30:03+00:00\r\nx-node: m9p-up-gc68\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T16:39:39.926138Z","times_seen":16380,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"87.242.88.149","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:31.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 297\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":297,"data":"{\"event\":\"chat_invite\",\"widget_id\":\"VYuYOwydE0\",\"chat_mode\":\"online\",\"site_id\":807105,\"device\":\"desktop\",\"visitor_id\":\"f132bd4b64a660d6\",\"widget_version\":\"192.8.0\",\"shard\":\"ya\",\"param1\":\"default\",\"param2\":\"11\",\"param3\":\"label\",\"param4\":\"online,time_on_page,time_after_close,time_after_invitation\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.7\r\ndate: Thu, 28 May 2026 08:58:32 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T18:09:48.345789Z","times_seen":16186679,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":155,"dns":60,"connect":43,"send":0,"wait":43,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/home/benefit-1.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/home/benefit-1.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-343\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":835,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca0bf5f5f004ca06371150e94718fa3f","sha1":"ecb0bf21ed5471a5b76b4f6bce3ae2e05c69bf35","sha256":"ca7667b9bdee439712f37e5159af08936d9cdc1aa2cbd831c36c9ea52a32b889","sha512":"761b4a927edf0681bf9b66026711ffbf375b7d2a2dff71f1f15ca44bc7d68fd3839fd9ff7de1e50c3672299492f89239a67fafbce15398573ed0defe70d07f58","ssdeep":"","tlshash":"db0185256f101a3cb4426764f3713d38d0be24135aedaed0c8b228b5252798d9cbb4c6","first_seen":"2026-03-31T14:15:06.284419Z","last_seen":"2026-05-28T08:58:51.664951Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/home/our-company.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/home/our-company.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-a94a\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43338,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e37e2c5dbc328532aff7a763b78a981","sha1":"5ccd0e208093849b1a9e3f9a41d0d9759d69b9f7","sha256":"e543a5db7c2bc7d2a9ea31c881143f03cc703cc8e1aec59718aa0fc0758c14a7","sha512":"4ab8088cfa1f595cae5d422c30a992de975b2787c93cae93c6eee8eda0d08f9f96abe0bea29e1db153b23a6dfefabb1b5cdb91c198eea251f6c12d8f6a43ed16","ssdeep":"768:ypFNLIOOm15GbmUBqs0nm3LjEdDUmT/MZenWCOWSkgQZuqTqQkjLXP:yDNLI4m6yqg/MwmrUeW8gTebGP","tlshash":"ab13c7c61370d3ec9ccada5fef399da8125eb0fda97a95c0455e8b08658bec9f601c40","first_seen":"2026-03-31T14:15:06.339609Z","last_seen":"2026-05-28T08:58:51.666422Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/home/round-check.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/home/round-check.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-1ce\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd0faf5570ab154f446819ffa2a9b0c1","sha1":"8eb3c5182f91f87bf32f18bf17518d34b865fadf","sha256":"72cce4cab58c442b2d2a8b362ef885b3804e88fb7bf9b6e430f15becc8133890","sha512":"fe55f04e1d5e739508d408607f6c94cc494791c4db27b62e5624d0c9d7f535ce998883e2cad17ee4682726e003b54537100bf04218a33fc0c9fcbf199de91f5f","ssdeep":"","tlshash":"c9f0dcb6939ccd08c5c9c7b3aa2810c53cf718a8a5380194aa4263113501a91df3d6b2","first_seen":"2026-03-31T14:15:06.355987Z","last_seen":"2026-05-28T08:58:51.668917Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/common/footer-ps-logos.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/common/footer-ps-logos.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-32d1\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13009,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"557a4637506de918dcf0da27620275a1","sha1":"278ee0f27acba2e65db682aaea439c1339b885b3","sha256":"f8b41bd910de88290869285bdde5e36d5d5534a9dda02c2b1a40043613b60817","sha512":"da02d332301104ac4597383be96627d847976d4c31769797b64dd3fe526cb2a5351738662d4bbae9630bf520ae2266db9431bc3fe425b83ab176e1880a9bf2a5","ssdeep":"384:vLLV/WCHK3dTMweBhocDfdPC0Deeb21Ax0UuELzqIpXz:vt/nuIVZFPt10+pz","tlshash":"9c4293c873f4b3f082c8d796efd462b9361f61f76e19812cc79a5e689a2051e8d54ec0","first_seen":"2026-03-31T14:15:06.329918Z","last_seen":"2026-05-28T08:58:51.67232Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/home/benefit-2.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/home/benefit-2.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-38d\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":909,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7abaaeb304554d1a04a86472ceadd68","sha1":"b39fa5f64c3d15441247e547b91cdcfa344b6606","sha256":"bcb5e40f6dd2a0865b62629973fbba08c6de72bc93a64a4b9ba6b5b17164674a","sha512":"b9e33530c39790afc3209175be1b52448992a9177f696e959964e5232382c3d02c84faaed224934aa9a28c5b99ef86476bd9326d49e3d9f0ce1ae43d36cf5e89","ssdeep":"","tlshash":"5311cc247f05982df1509724f731343cd02e18a77ecc099dc96aa8a10a6391d08f74db","first_seen":"2026-03-31T14:15:06.346809Z","last_seen":"2026-05-28T08:58:51.688789Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:55:08 GMT\r\nexpires: Sat, 22 May 2027 13:55:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 500586\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-06-06T17:23:08.438165Z","times_seen":54615,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":83,"dns":3,"connect":15,"send":0,"wait":30,"receive":16,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/da8269d/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:20.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /css/da8269d/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 25561\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"6a0dbb3b-63d9\"\r\nexpires: Sun, 31 May 2026 13:49:23 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-21T13:49:23+00:00\r\nx-node: m9p-up-gc90\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1f06fa8edf5c67ac64217c0f32bd0432","sha1":"6b2f6f757cf0593604e0047c6d6eee2535821217","sha256":"c9743d00e642be1dae8fa276ac280a552b9ae3a5d11fcabdbc39fd40f0cd7deb","sha512":"40ae38b128d2b67493f19c83f856cae6455a18384846ee07264d5735fb2aee14897b905ab9bfca326144276a3c7933fbc83f93c514b5399339c1a6126cda2c13","ssdeep":"1536:SL5GTKVyQ6V6Krh0Duwyu2o2ESipVyG6D6v+Jlr4pUU62FkPQLi4OhlODDd6zcj1:P4VouHysex/VI","tlshash":"24d3e96aead2953ce51e541ac8c5aa3ca53de502cf330daff344f3e187ca6e21276505","first_seen":"2026-05-21T22:07:47.943222Z","last_seen":"2026-06-02T09:41:22.083889Z","times_seen":414,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/modules/system/assets/css/framework-extras.css","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /modules/system/assets/css/framework-extras.css HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 May 2025 00:39:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68292c30-8a\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0798c14105e9c4e8c28ac8b14ee90b3c","sha1":"c82455770e7cc00bf9954fe378424dc59ba5e851","sha256":"96542948badc6d47deeefd25fdbe67ecc48d2e9d3632703bc85a9643e6f38561","sha512":"994ece4e894a1350bf9d5eb52b92df525561b182d4c61ab79efd73d406fb25376695d6a7001c34484a36b744334d2631c8925fd7beb11acd91b8c8d49b42db44","ssdeep":"","tlshash":"f2c048cb62eb3323ee3720a059e9871776a9b6237ae048560849b0c45890f91332d840","first_seen":"2023-08-12T16:10:34Z","last_seen":"2026-06-04T19:17:36.260751Z","times_seen":229,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:14.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vrnconsult.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 09:21:02 GMT\r\nexpires: Thu, 27 May 2027 09:21:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 85032\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-06-06T15:36:06.270813Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":91,"dns":3,"connect":33,"send":0,"wait":30,"receive":2,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:21.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 28 May 2026 08:58:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6a047476-16b0\"\r\nexpires: Sat, 13 Jun 2026 14:15:17 GMT\r\nlast-modified: Wed, 13 May 2026 12:54:14 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-14T14:15:17+00:00\r\nx-node: m9p-up-gc7\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T16:39:39.940544Z","times_seen":16381,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/common/cross.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/common/cross.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-105\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35ed333c4ec76ab9d73fb6a7ba84e12d","sha1":"8015b3ff9f6241327d33fa2f93c69141184f03aa","sha256":"ba0c9bdcc9d71cc808f31c58a0ba094667ec571e10fbb62a556bacefdf8f7e03","sha512":"ff197cb4bea4cc82ec1b278ee3de0c9a9204f3881f4a5d1f9612becee78607bfdd222b303749f7e125d731d9deadd7cb76077b2954cc7ab40e96281d991d69a2","ssdeep":"","tlshash":"32d02e29070c0c2cf1200b20f3803630a1be29c322c8daa0ece229301130a5ee8bf1e8","first_seen":"2026-03-31T14:15:06.340852Z","last_seen":"2026-05-28T08:58:51.698053Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/common/telephone-icon-white.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/common/telephone-icon-white.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-5d8\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa0b267231ffc6e0dada6cb7fcb9efa3","sha1":"d9d640b7ff2ef15ebf85105a76669f3c6701ca70","sha256":"502591f91e857ffb6f97b92dff45770787aa5a188bbe1c5bd4fd9baadb5a7dd1","sha512":"ccd38b1376f2c593dcb9e7cc534254dfc07f937c0fcdd2542c2a31fa177476e8b272c625b86231a985e993e265ca9dbd0a7476d7e1646fad070b23c0fac5bcff","ssdeep":"","tlshash":"3831dcf6e2d4fab8f402c3f8925b6035762720fab386db51d3644a64d31618d88aad84","first_seen":"2026-03-31T14:15:06.324763Z","last_seen":"2026-05-28T08:58:51.699867Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrnconsult.com/themes/verno/assets/build/img/home/benefit-3.svg","fqdn":"vrnconsult.com","domain":"vrnconsult.com","tld":"com"},"ip":{"addr":"187.124.41.198","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:13.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrnconsult.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 08:54:32 GMT","end":"Thu, 20 Aug 2026 08:54:31 GMT"},"fingerprint":{"sha1":"F6:15:AA:CB:8F:FE:FB:1B:9C:71:61:B2:71:B7:2C:9C:70:21:64:DE","sha256":"9D:9C:D3:4A:8D:82:B9:56:F0:FF:16:E0:59:7C:DE:55:59:64:D5:E9:B3:5F:BC:A1:57:26:02:22:FC:94:A2:69"}}},"request":{"raw":"GET /themes/verno/assets/build/img/home/benefit-3.svg HTTP/1.1\r\nHost: vrnconsult.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver\r\nCookie: october_session=eyJpdiI6Im5wUzhETEZ2WTBuSU1nWm9jcDRud0E9PSIsInZhbHVlIjoiRWp2Snp6NnB1bnNRTEhkMnpqNGh1cm84SzdFdkRTK0pEa1BTN2lTNGFDUHpNSDNzbG9lMjVnSTlyb3ZoYzhxRGRuTldPSk1sQ2ord0RiWGcxTlVlRFIzL1BNL3Z2c0JXN2RVK2JMWmM1cFpxeHFkY2pFZW04SGMyOWc4c1RHUloiLCJtYWMiOiJjMzYwYTM0OGQwMGI2NDdiNWI2MzI3YzhmMmYxM2ExOTJhZjkzYmEzM2Q2MzVjNTY1OWQyZDI1M2UzNGJiNWFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.1\r\ndate: Thu, 28 May 2026 08:58:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 16 Dec 2025 14:45:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941708d-3c0\"\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":960,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b93143cf89193eae467ddfac6181847c","sha1":"e7dfd15537c0a0b42254a17c021631be83e28171","sha256":"d1aaf417de34f97e1a97ff1533942e3408ea452709b74edd63981d611b6f185d","sha512":"3a999ce54e61db8141e0dba470f8425ab1e253c410debabac99da6a578b5d5ec6cd354914b3a5f86002dc96459b228266cb54285797dc5ecf7c62518ff427509","ssdeep":"","tlshash":"591174242b181a3d78109a0ff635b030989e1cb275dc1dd8c4926d3020a386d9db78db","first_seen":"2026-03-31T14:15:06.311014Z","last_seen":"2026-05-28T08:58:51.702028Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vi-ya-6.jivosite.com/VYuYOwydE0?f132bd4b64a660d6","fqdn":"vi-ya-6.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://vrnconsult.com/?utm_source=facebook\u0026utm_medium=cpc\u0026utm_campaign=ru_conver","date":"2026-05-28T08:58:22.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /VYuYOwydE0?f132bd4b64a660d6 HTTP/1.1\r\nHost: vi-ya-6.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://vrnconsult.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2/muOMZcvGbGjphIT6YDvQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: 5.252.32.145\r\nDate: Thu, 28 May 2026 08:58:22 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nAccess-Control-Allow-Origin: https://vrnconsult.com\r\nSec-WebSocket-Accept: EIQF/yxfKvDmclK2AUKKyD4DrzI=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T18:09:48.345789Z","times_seen":16186679,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":83,"connect":101,"send":0,"wait":155,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}