{"report_id":"afae876d-e042-4116-90c8-2361978131d6","version":6,"status":"done","tags":[],"date":"2026-03-07T02:40:46Z","url":{"schema":"https","addr":"xn--uarda-j1a.app","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":0,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"xn--uarda-j1a.app/","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"title":"Web Multi-currency Wallet | Guarda","dom":{"size":12957,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2246)","md5":"606d9f74124b8ea4109be5e476a1844e","sha1":"09258a6cf8a4fb0fede032601778806425c8998b","sha256":"8f286f0870cc2b67fee8b4ea69c18cc5dc248f9ea557d50b56cdf55bb07d88ef","sha512":"203aef93a75cdd266c864717c24e8e91a9d72c47b2b9f5f4820eb5393ab3c0f3357b3f438bae6ea15e593a2887c899ce9eff7c8dc0ab8e4ee14ee7758a21095f","ssdeep":"384:To1El1y1jUrV1519151lo1lm71UY1Mu1lg131qu11rT11Q1eu1X1ikRu1U1K131z:TfWUrlMmWT8j6rLlCRZjytpvYMrcbKdP","tlshash":"8c4234738a50650c8537b318ed33a5be8462e5dbff13074ca308b66bc2de9550a3a7c9","dom_hash":"domhash7ba579253ad78715332714663a254259","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xn--uarda-j1a.app","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":0,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T02:40:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T02:40:22Z","timestamp":1772851222,"ip_dst":{"addr":"Client IP","port":41530,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-03-07T02:40:22.022697+0000\",\"flow_id\":1485567180491226,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"87.247.157.151\",\"src_port\":443,\"dest_ip\":\"172.18.0.47\",\"dest_port\":41530,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--uarda-j1a.app\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:27:3C:A4:18:C7:F4:90:6A:E3:21:0F:45:14:1D:CF:9E:74\",\"fingerprint\":\"e5:49:78:48:c0:a8:4d:10:48:d6:9f:59:df:e9:a8:48:01:e7:63:3f\",\"sni\":\"xn--uarda-j1a.app\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-02T21:22:43\",\"notafter\":\"2026-05-31T21:22:42\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1072,\"bytes_toclient\":3422,\"start\":\"2026-03-07T02:40:21.805338+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T02:40:22Z","timestamp":1772851222,"ip_dst":{"addr":"Client IP","port":41592,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-03-07T02:40:22.571893+0000\",\"flow_id\":1121113435705671,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"87.247.157.151\",\"src_port\":443,\"dest_ip\":\"172.18.0.47\",\"dest_port\":41592,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--uarda-j1a.app\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:27:3C:A4:18:C7:F4:90:6A:E3:21:0F:45:14:1D:CF:9E:74\",\"fingerprint\":\"e5:49:78:48:c0:a8:4d:10:48:d6:9f:59:df:e9:a8:48:01:e7:63:3f\",\"sni\":\"xn--uarda-j1a.app\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-02T21:22:43\",\"notafter\":\"2026-05-31T21:22:42\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1202,\"bytes_toclient\":3422,\"start\":\"2026-03-07T02:40:22.364871+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T02:40:22Z","timestamp":1772851222,"ip_dst":{"addr":"Client IP","port":41542,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-03-07T02:40:22.577723+0000\",\"flow_id\":313028223859750,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"87.247.157.151\",\"src_port\":443,\"dest_ip\":\"172.18.0.47\",\"dest_port\":41542,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--uarda-j1a.app\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:27:3C:A4:18:C7:F4:90:6A:E3:21:0F:45:14:1D:CF:9E:74\",\"fingerprint\":\"e5:49:78:48:c0:a8:4d:10:48:d6:9f:59:df:e9:a8:48:01:e7:63:3f\",\"sni\":\"xn--uarda-j1a.app\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-02T21:22:43\",\"notafter\":\"2026-05-31T21:22:42\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1072,\"bytes_toclient\":3422,\"start\":\"2026-03-07T02:40:22.359462+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T02:40:22Z","timestamp":1772851222,"ip_dst":{"addr":"Client IP","port":41570,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-03-07T02:40:22.590753+0000\",\"flow_id\":530572612370812,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"87.247.157.151\",\"src_port\":443,\"dest_ip\":\"172.18.0.47\",\"dest_port\":41570,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--uarda-j1a.app\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:27:3C:A4:18:C7:F4:90:6A:E3:21:0F:45:14:1D:CF:9E:74\",\"fingerprint\":\"e5:49:78:48:c0:a8:4d:10:48:d6:9f:59:df:e9:a8:48:01:e7:63:3f\",\"sni\":\"xn--uarda-j1a.app\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-02T21:22:43\",\"notafter\":\"2026-05-31T21:22:42\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1072,\"bytes_toclient\":3422,\"start\":\"2026-03-07T02:40:22.360828+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T02:40:22Z","timestamp":1772851222,"ip_dst":{"addr":"Client IP","port":41558,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-03-07T02:40:22.592019+0000\",\"flow_id\":810282357522641,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"87.247.157.151\",\"src_port\":443,\"dest_ip\":\"172.18.0.47\",\"dest_port\":41558,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--uarda-j1a.app\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:27:3C:A4:18:C7:F4:90:6A:E3:21:0F:45:14:1D:CF:9E:74\",\"fingerprint\":\"e5:49:78:48:c0:a8:4d:10:48:d6:9f:59:df:e9:a8:48:01:e7:63:3f\",\"sni\":\"xn--uarda-j1a.app\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-02T21:22:43\",\"notafter\":\"2026-05-31T21:22:42\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1072,\"bytes_toclient\":3422,\"start\":\"2026-03-07T02:40:22.360657+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T02:40:22Z","timestamp":1772851222,"ip_dst":{"addr":"Client IP","port":41582,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"severity":"high","alert":"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing","source":"{\"timestamp\":\"2026-03-07T02:40:22.595812+0000\",\"flow_id\":1239366770266168,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"87.247.157.151\",\"src_port\":443,\"dest_ip\":\"172.18.0.47\",\"dest_port\":41582,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2024227,\"rev\":4,\"signature\":\"ET PHISHING Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing\",\"category\":\"Potential Corporate Privacy Violation\",\"severity\":1,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_04_19\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_08_20\"]}},\"tls\":{\"subject\":\"CN=xn--uarda-j1a.app\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:27:3C:A4:18:C7:F4:90:6A:E3:21:0F:45:14:1D:CF:9E:74\",\"fingerprint\":\"e5:49:78:48:c0:a8:4d:10:48:d6:9f:59:df:e9:a8:48:01:e7:63:3f\",\"sni\":\"xn--uarda-j1a.app\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-02T21:22:43\",\"notafter\":\"2026-05-31T21:22:42\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f9fcb52580329fb6a9b61d7542087b90\",\"string\":\"771,52392,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1202,\"bytes_toclient\":3422,\"start\":\"2026-03-07T02:40:22.364600+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"xn--uarda-j1a.app","ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":14,"received_data":359361,"sent_data":6573,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":31940,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":87942,"sent_data":1104,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/4876.55f9e9101caab8cc0840.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/4876.55f9e9101caab8cc0840.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 35913\r\nLast-Modified: Mon, 02 Mar 2026 22:17:05 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c61-8c49\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35913,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35913), with no line terminators","md5":"e50437e33b7041879442d25d79085cff","sha1":"db7286de31faa0b5ce9700faef5d24cbfdf6ebab","sha256":"508971f997f4295086d5dfa5b9e9720b5fce625746229b278014c687ee2beb39","sha512":"f5c5226a6892e3c41a1c3f43396f2d645a05213a33f05627e051750aee061816133e5b56ebba9adc54b649bcebb8c994fb4a1d8698df7581983b28a97a2ea719","ssdeep":"768:ZCu+oorbmkG0E64deiGtmS5sYSOXHOhzE:ZClHC36V35s8uhg","tlshash":"36f207a0a47c11e8f331c11587c2abcc9da2e220ade61d9ae49f525ccbf1146e754f7b","first_seen":"2026-03-07T02:40:52.101504Z","last_seen":"2026-03-07T02:40:52.101504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/2290.dc7fc0977d56ec23ff94.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/2290.dc7fc0977d56ec23ff94.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 36198\r\nLast-Modified: Mon, 02 Mar 2026 22:17:06 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c62-8d66\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36198,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36198), with no line terminators","md5":"a790046889b643361819b540565ef2ae","sha1":"e5dd12e256d82bf92e142688e917a53250f5dc26","sha256":"671df87191bc30e9a29bb4cab0e1cd69c30ab621c359d3981a61333d85cac77d","sha512":"2c8eacb6a4fe46f0c4ab3a9a649279b5d9429c27b3818e794d0ebeb822d08c25172c6eab596546f2f40d8d77cd615d3322c4b931792d36201934f04cffe54e21","ssdeep":"384:LCMJ4ROVoSl3GR3q5VtC5Y5/M6Hm29wyxKPWiI0hCoFC6E4FyL6g:GROtltY5h6GKwyoXI0tJdg","tlshash":"17f2a912e3a8f32df0378739d0c0aae979394405ef433abdf7852169ca921575f62b16","first_seen":"2026-03-07T02:40:52.104992Z","last_seen":"2026-03-07T02:40:52.104992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":271,"dns":1,"connect":35,"send":0,"wait":162,"receive":79,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/5671.81947ce573d4bad2b712.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/5671.81947ce573d4bad2b712.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 19232\r\nLast-Modified: Mon, 02 Mar 2026 22:17:05 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c61-4b20\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19232,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19232), with no line terminators","md5":"faf510867ee9b8cb6f803987ea21b272","sha1":"533e3dcf870a0f08e395311f3c49c733169c815d","sha256":"bc1ffc92600523c4c7ba24709e8b1a9c3b6feff480619ba376f1f2feb2b2c0f5","sha512":"6090400b548267c35660f533cec764d0cbab93ede4ed585e6d151709c8afc28d7db27ed045ea9c4ae123fe493f55f45f2affe555e30bba33bea12a3f8ac957cd","ssdeep":"192:z6t6DbzAs01d3TDf5F8h4rdpWZjZp/4mBl+9fMJNOvwUWLPoD6:OCMRrrbWZjZp/XnN","tlshash":"b5828622b6606639f06fc33e7c91a59831b5c012e55b77bce892b1b8d69b4530f3270e","first_seen":"2026-03-07T02:40:52.118417Z","last_seen":"2026-03-07T02:40:52.118417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":283,"dns":1,"connect":43,"send":0,"wait":176,"receive":32,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/8654.c38904975b49e925446a.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/8654.c38904975b49e925446a.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 51667\r\nLast-Modified: Mon, 02 Mar 2026 22:17:05 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c61-c9d3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51667,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51667), with no line terminators","md5":"b699a3192e5e9545a0e09a3b3e339910","sha1":"11f965cc8a3e49e159a310c083bbfaf61450bd4a","sha256":"d2aeca996149f56431a46a90cd4f6e799b106facbea283ece34bc95837cf7481","sha512":"761dda36d58ce9abbeb649429dedeacde3a8a55ae393a588980623b68f21ac643993b3ea04dc614c96f698a2eba3217ca92575776725575eb7c69777daf35258","ssdeep":"384:VH1aCSqd0WPpMxmRSC+Yf6boAj25dNb4RFs1RuxJhKvtPE+O3JsMOqdXvK8CgLAd:91hzbSVYy8wUdNba6ju3geJsMtvKkcd","tlshash":"9833c6165631217ef15b803eb8c0faa9312c4a92d17766bdef94ab35cec3053271e74a","first_seen":"2026-03-07T02:40:52.120962Z","last_seen":"2026-03-07T02:40:52.120962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":102,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/5058.9e2072289ef26675b9c7.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/5058.9e2072289ef26675b9c7.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 42688\r\nLast-Modified: Mon, 02 Mar 2026 22:17:06 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c62-a6c0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42688,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42688), with no line terminators","md5":"5df69eb142327cd90cb7df83f063d82b","sha1":"a497a78045593e106463f80d5440c21786d82040","sha256":"f4a9564cbace0175eb46f2d5a0838d5d7785aa9897bf94d390768161ef1e111f","sha512":"8a2a2e13dae38a8451dd6bf0fa796357f7833e171cbb86b2192fa95f68ed3c27eeef31b676638e0a2e025991a64f1705155c4a71d504b47fb8af847c97976910","ssdeep":"384:rfSddW1l3ESPbI3nkq3OVQ2RYr9uc0s9wlH2KS2uf+wilcb0iFe+4AY:DSdsG3kqSbImZ2KIf+wmQ0iFe+49","tlshash":"db13e9133264223f703bea39b842795471368991d06b62b8fc75113dcfea2ab5f67718","first_seen":"2026-03-07T02:40:52.123552Z","last_seen":"2026-03-07T02:40:52.123552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":278,"dns":0,"connect":0,"send":0,"wait":160,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/6287.aa0cd6b2c84278a8e84f.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/6287.aa0cd6b2c84278a8e84f.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 41638\r\nLast-Modified: Mon, 02 Mar 2026 22:17:06 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c62-a2a6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41638,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41638), with no line terminators","md5":"b32331f63b4ebca9dd22af296c1d58cd","sha1":"d658be954e2b21f1e8f38d7937eadb7f052dfebb","sha256":"fce8f4ec6e95c0489b8ce5d833b2a2d1efb3aa78f015d1f44d2771787dfd697a","sha512":"b40f0be2cb4755067efcf3a2f4539c449948a2acc1d07490be39f5f69e473eb9710ad7bd03fec26bc1e8e83d176d6324a85df463e39ebe4ebec5d7d6032da7f0","ssdeep":"384:EHkEZsU02ol6uDGqeAn4+eYgds3DXi0+j5sER0qkLMVG2tA8F0y/h2:EHkusUO3ef+iQQj5sClxD6n","tlshash":"3213a563e710331db03bd23a68d0aaea71758506e66b637debc46139cad60671f37708","first_seen":"2026-03-07T02:40:52.12594Z","last_seen":"2026-03-07T02:40:52.12594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":282,"dns":1,"connect":39,"send":0,"wait":192,"receive":79,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/assets/images/favicons/android-icon-192x192.png","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /assets/images/favicons/android-icon-192x192.png HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 2042\r\nLast-Modified: Mon, 02 Mar 2026 22:16:55 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c57-7fa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"6e7b86802b2754c5a045f9ea8eb00eee","sha1":"1daae74192186685680541b01bdee9e48cc641e1","sha256":"fcb45b7ac4ddc17453c90e76aaad1551114c6156fb75eef419f954aa589e4c1f","sha512":"30ac242bbcdca4e01a7988acec4d598188e980cfceb52df97cda6120f7c56e2afceb69a2d991554f175f446c4a4701a8cf063eb3d2c5bdf0cbd97dec99417b12","ssdeep":"","tlshash":"dc411ad3b019dc5eb958cea776b0072b9e0584241cfb41d19b6c5231de4723a39f24ad","first_seen":"2026-02-15T14:35:33.803837Z","last_seen":"2026-03-07T02:40:52.128153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/ceb5040617c003b0315897e3209e7401.svg","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/ceb5040617c003b0315897e3209e7401.svg HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/app/assets/5671.81947ce573d4bad2b712.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:23 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 779\r\nLast-Modified: Mon, 02 Mar 2026 22:17:02 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c5e-30b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":779,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2523a3a604de74d2351730fc5603582f","sha1":"f7b45ea19ba0da741797675e9bc62087ef99a4f1","sha256":"1af8b9eef1caf69175b2c35f63f5f97ab57182d28fd7c43ff45c21281adf4e13","sha512":"596fb054e3f235f1b29a9ef48f4f6d1e2a5e871e1afd4b1ac2f24b186c7d69cc8bff500bc1e4f96becef37189c338ad017357f5be77e05de759d289f355fe0bf","ssdeep":"","tlshash":"3401d6f7df89363d2feac26097262089721e67b671a40a7579bcd0b11587c28c50fc85","first_seen":"2026-03-07T02:40:52.131843Z","last_seen":"2026-03-07T02:40:52.131843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/6958.dde54fdd5161031be5b6.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/6958.dde54fdd5161031be5b6.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 8393\r\nLast-Modified: Mon, 02 Mar 2026 22:17:05 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c61-20c9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8393,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8393), with no line terminators","md5":"50f5d3427ec355b0257f60684997aa33","sha1":"f793badd399896e3bfa0a03b795536307fc530f4","sha256":"92af2ad86f7fae33b900d6c7f6b951b83046a357f9282b695c2b746a78a20b7d","sha512":"2beedf2ca4f3123f2e20b4ecc78cbc455d336c95d30acd4891eded5dc2cc431b3946facc60b46f2aa915a70191371cbcba62b5139b6e9c485d2386f059263908","ssdeep":"96:o8A7mBbQr+i/kDixNp6siagvu63Oq7PeKSG0l0v0KA+hk0DCE5NJ4E8Liq/xWYOc:ovmBbQr+gQ4NVQ26f6+A+hk0DDvu","tlshash":"34025521e6e4232c702fc63df781a397302a4155d27afab5aed95527ced11b64f3a304","first_seen":"2026-03-07T02:40:52.139547Z","last_seen":"2026-03-07T02:40:52.139547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":484,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/assets/images/favicons/favicon-16x16.png","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /assets/images/favicons/favicon-16x16.png HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:23 GMT\r\nContent-Type: image/png\r\nContent-Length: 342\r\nLast-Modified: Mon, 02 Mar 2026 22:16:55 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c57-156\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"0aaba7ba691291049aab4f7983c56b88","sha1":"ab16d73b9aafc6a73c0e9650f50b6ebbf98579b5","sha256":"2da4578c36b6fc0d9b774e1f327384b5c41961aaa5eec9d9470b6e3b57d96e75","sha512":"001a753dd1517b4abab0abf86cd277c9ce534784be14bec0f9e3317055e8f3273df4fb85468bd97b78b230718e980313ca79c19ae6d9e2d9107c06cb34f8424c","ssdeep":"","tlshash":"d0e0c0bbf6719f14d178da43875bb470f4264210a985b4815d3ec5f49572b684103a49","first_seen":"2025-11-28T07:40:05.621516Z","last_seen":"2026-06-28T04:56:54.556338Z","times_seen":14,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T02:40:21.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13091,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2246), with CRLF line terminators","md5":"48966e5a1e1d6f1ea212e16a5bb67341","sha1":"0164140bb719dc9bf320baf298ef7f2001c80f28","sha256":"aff85bcaa151f2db3fa23ba5e97892d0372a64e473e11bb9ccefbdbd61116603","sha512":"ce386acd056f442adc6724862769854864d8017b415150dcfd528b1ed0c0c0bc313084f02004bffeb1f1954c121e6f5f7330a6b80b4b00dac1d12338ea2a42b5","ssdeep":"384:3m1El1y1jUrV1519151ld1om71dY1Su1lg131Zu11rT11Q1eu1X1ikRu1U1K131Y:3BWUrl4mrz8g6rLlCRZOytWvYMrcbKOd","tlshash":"264225738a60650c8637b33dac23d5bec462e587fb13074ca348766bc2ee9554a397c9","first_seen":"2026-03-07T02:40:52.144781Z","last_seen":"2026-03-07T02:40:52.144781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":396,"dns":127,"connect":33,"send":0,"wait":93,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/3041.ce1d964987298d5f59b8.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/3041.ce1d964987298d5f59b8.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 49452\r\nLast-Modified: Mon, 02 Mar 2026 22:17:06 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c62-c12c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49452,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49452), with no line terminators","md5":"bdea03d92f6d814206a91f70658c3176","sha1":"f5879316e20ada2fd183c23e670da9f14267c184","sha256":"1e3102d41cea9c31ac8ebd086df29ffa05cbe9d7071b33deb02defbd044570ef","sha512":"59ac14209829bbc283cd1a74b46d2dddc63f9a98ed0830925c8a53fd575a949c03f6b6aa16fff3b468d0b8fc7959a06e1e4bc3a9d329d8b6b9b14b697f5237bc","ssdeep":"384:r2+4IMjx60kuBQ5PthdLHomRSzqYf6bo7HC1GWlESVOvQF5E/h:BDQvkiQ5PTtS+Yy8bDWlJOvQF5Ep","tlshash":"4623d8559a103d25602fc73fb6d0a69a60361506b677eefbff903e29cdc2853072921b","first_seen":"2026-03-07T02:40:52.147743Z","last_seen":"2026-03-07T02:40:52.147743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":286,"dns":0,"connect":37,"send":0,"wait":175,"receive":95,"ssl":255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400,500,700%7CUbuntu:400,500,700%7CInter:300,400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:400,500,700%7CUbuntu:400,500,700%7CInter:300,400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 02:40:22 GMT\r\ndate: Sat, 07 Mar 2026 02:40:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31254,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c600ec94a35b5c0cc0b003e6500e79c6","sha1":"62c8365a0c860d29dbabdbdcf9b7c03b90b1af48","sha256":"2c8e2c2c2c89c9f3e45c21f975e0dad5dcc63668134dd9404cf392afbdfee4bd","sha512":"40db6ea55255240ce16e5fde7d11612115689196e06e7cd95b555cf62d756102e8d2673ca68210f0e7cd6894d321bdb81caa130fd3a98d501e9a18e81d5079cc","ssdeep":"768:9Ml22YfRiJhan6BBYERNeWwhQHHYORjUM7:nHTe","tlshash":"c2e200a2042b940067831cd223cf7f35ee8f51447086d0b5abfd5e9aacebd66436936d","first_seen":"2026-03-07T02:40:52.149575Z","last_seen":"2026-03-07T02:40:52.149575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":105,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--uarda-j1a.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:59:55 GMT\r\nexpires: Fri, 05 Mar 2027 14:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 128428\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-26T07:23:03.95429Z","times_seen":244760,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":155,"dns":0,"connect":21,"send":0,"wait":8,"receive":4,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/9936.ffdd77f6802d21246fe4.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/9936.ffdd77f6802d21246fe4.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 34452\r\nLast-Modified: Mon, 02 Mar 2026 22:17:07 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c63-8694\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34452,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (34452), with no line terminators","md5":"dba8f6bdf794eaf3e45c66bfc79f8221","sha1":"d3a154f86497f29bca772f917305c4bf8b9a42b0","sha256":"507fd7a3f29f4d3b5c340d973ecfef20bcc0be195d091c03acc1652423f18601","sha512":"2f2e253030db40234551a386e6a5b865079ffab0391835e6e96aca3ed1b7757801f2f4eed59e319f0079985273fc0c78d9bc567b9e13cf4d9adb3bcbdb2dc6c8","ssdeep":"768:lYq/jCFawU6j4hnxSEI5zvqVA+Gh2X8zD/S:D6snq5zvq6U","tlshash":"f4f2a516e170713db42f847aa48179ac30398926db432abee96477bdc3db09b277570c","first_seen":"2026-03-07T02:40:52.152045Z","last_seen":"2026-03-07T02:40:52.152045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":264,"dns":1,"connect":29,"send":0,"wait":147,"receive":63,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--uarda-j1a.app/app/assets/9409.5e76ed61ca5f4c5df05e.css","fqdn":"xn--uarda-j1a.app","domain":"xn--uarda-j1a.app","tld":"app"},"ip":{"addr":"87.247.157.151","port":443,"asn":214822,"as":"Mt Finance LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xn--uarda-j1a.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 21:22:43 GMT","end":"Sun, 31 May 2026 21:22:42 GMT"},"fingerprint":{"sha1":"E5:49:78:48:C0:A8:4D:10:48:D6:9F:59:DF:E9:A8:48:01:E7:63:3F","sha256":"DC:2E:E1:62:C8:24:55:4A:6D:EC:64:88:57:BC:63:BF:40:44:51:04:FF:6E:18:75:34:E8:37:EF:2B:96:7C:87"}}},"request":{"raw":"GET /app/assets/9409.5e76ed61ca5f4c5df05e.css HTTP/1.1\r\nHost: xn--uarda-j1a.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--uarda-j1a.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 07 Mar 2026 02:40:22 GMT\r\nContent-Type: text/css\r\nContent-Length: 20260\r\nLast-Modified: Mon, 02 Mar 2026 22:17:07 GMT\r\nConnection: keep-alive\r\nETag: \"69a60c63-4f24\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20260,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20260), with no line terminators","md5":"6c2d65e08bddf0154b56801fda8a1e8d","sha1":"a663fe5b005ab856f6bf20011e47a579c3bd272e","sha256":"c1fe1b7e7a965d8f240845b18b278ac2ac467e793ba8ff54d84a540079203b34","sha512":"919d3847e73a88620896c8ec9d2f77166061795841d325adaa32178e1e09f02ba5956e369ada3b74b3952e5550528a1e5e6a33510324533d6b4702cba65f22f5","ssdeep":"384:hJpR9BiUshKQP4QJxyl2qvL+5DtAEN95nmqZFEdwWwWW7Lq2ZLf/jXO0iu70M9Ky:84Ll2qveNNuhaF","tlshash":"ac925412b368e33cfc2bd326b45062f9b175865397536679ead1b778c9830832f1660d","first_seen":"2026-03-07T02:40:52.153342Z","last_seen":"2026-03-07T02:40:52.153342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":464,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--uarda-j1a.app/","date":"2026-03-07T02:40:22.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xn--uarda-j1a.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:59:55 GMT\r\nexpires: Fri, 05 Mar 2027 14:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 128428\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-26T07:23:03.95429Z","times_seen":244760,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":95,"dns":1,"connect":8,"send":0,"wait":10,"receive":10,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}