{"report_id":"b1fbbe3c-3ca6-4c57-9d6d-6dfd45eb6ec3","version":0,"status":"done","tags":[],"date":"2026-08-01T18:07:20Z","url":{"schema":"http","addr":"fituree-menupay-id.offcou.beauty","fqdn":"fituree-menupay-id.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fituree-menupay-id.offcou.beauty/","fqdn":"fituree-menupay-id.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"title":"Yuk Aktifkan DANA CICIL \u0026 PayLater","dom":{"size":22427,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1493)","md5":"51c456a02db3443be9cde561bfdca9e0","sha1":"e0af1dfa67b12ef0557c4bbd3b731c431acc7dfe","sha256":"7e5f0927d86df2bb9e56707b97273e3b3913706e02c2d0ac3a7bc48f1fdc6761","sha512":"fee898af44d7872cbc909c6ff6950d6c8a08d94f7076898b1cacc47d156cb5a8325d0d971df28a954ded781e34a64c5cabc3f3d55d7f334506f65b2f10125979","ssdeep":"384:vzVsMnwkZ0qR9fzqVr8KXAi2bpXb3D1r5VvclYnv0m4y:NZ0Wfzgr8KXAi2btf1Vp0mh","tlshash":"0da2b431a1e42437018b97d999a6930b3db7d25bde47452436bc8be40fc2ec6ec2796c","dom_hash":"domhash227d6850cd45a5c322d437ad636e8adf","first_seen":"2026-08-01T18:07:23.067208Z","last_seen":"2026-08-01T18:07:23.067208Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fituree-menupay-id.offcou.beauty","fqdn":"fituree-menupay-id.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T18:07:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fituree-menupay-id.offcou.beauty","ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-12","domain_rank":0,"first_seen":"2026-08-01T15:12:36.752595Z","last_seen":"2026-08-01T15:12:36.752595Z","alert_count":0,"request_count":2,"received_data":23872,"sent_data":1038,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"cssnya-adam.offcou.beauty","ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-12","domain_rank":0,"first_seen":"2026-08-01T06:15:36.069758Z","last_seen":"2026-08-01T06:15:36.069758Z","alert_count":0,"request_count":21,"received_data":2681855,"sent_data":11556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"picsum.photos","ip":{"addr":"172.67.74.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-14","domain_rank":29556,"first_seen":"2017-10-10T10:03:26Z","last_seen":"2026-07-26T02:28:53.297332Z","alert_count":0,"request_count":4,"received_data":3277,"sent_data":2259,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fastly.picsum.photos","ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2017-09-14","domain_rank":452388,"first_seen":"2023-01-26T01:05:02Z","last_seen":"2026-07-31T03:04:58.312365Z","alert_count":0,"request_count":4,"received_data":9097,"sent_data":2337,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fituree-menupay-id.offcou.beauty/","fqdn":"fituree-menupay-id.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ee7b5be3736912de57d9dfc2ca1932a","sha1":"e2c8a680df62f33a79765c413eed003f6f85f768","sha256":"b0066495755924ea1bec2a5861521b330417b782e0a1aecad55de4d660052f8a","sha512":"f2b278615cd9d64346dcaa5cc9d754666ede30effb39f284e8da20cb992f7783f3e61901d5acd7ebfdae89ba8a6b1215f2f023a794d95338e69601294c988aad","ssdeep":"192:jQBsKDia1rD/V4MSSjcR3DYnJjVMivRVgWXlk:cD1r5VvclYnv2","tlshash":"cb02bb16b2953579889f67fec5eb82943c3615c39d45c83428a88e240f909c9653abed","size":8616,"data":"","first_seen":"2026-08-01T06:15:40.378804Z","last_seen":"2026-08-21T04:08:15.572053Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/dev/live1.js","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3bb1ab339bdfc5d64b0afc65e54ba5b","sha1":"4cc1b882dea5154ca4aeaf515ec05aea96c2023e","sha256":"026faf52ff3fb5c6a886d8db4b13a89bf2ad2517627398ad9aead1c3927a0df6","sha512":"9b34452ec94a5155585a88cf75c617d3feb090c5d520eb99a36d14ebf10bdd2a77e8774baa97f1ec3cc58b82f4ce5466b1142298e46d5f077ed8368dbddd17dd","ssdeep":"192:6q20qIMMP9kom5NWOa6p20kYxd91rWyu2jGZaoi:nVqIMMVXmRlp20TaQf","tlshash":"e63287adace320765d52c7f58abf622435e9d913848dc015b92ce3600f88d49f259dfc","size":11397,"data":"","first_seen":"2026-08-01T18:07:23.084487Z","last_seen":"2026-08-21T04:08:15.537183Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/pay.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.209Z","timestamp":1785607613209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/pay.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hMc976JOd3avS11N7Pm2rdd6LOxsRckvF904jtvWXtUTHwuXpUl1aorRiFq1arfKR3mG2Tyn5aex4lfMrPbQ%2Bhqinr9X27Xy9QuSD0yiIO%2Bp%2B1w1R6zVBAbkzrNpDGGaNbqsCJIblWlvr3Di\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e88310b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114875\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114875,"size_decoded":115559,"mime_type":"image/png","magic":"PNG image data, 387 x 387, 8-bit/color RGBA, non-interlaced","md5":"abc2836118ef2a5d9b19232b3872eca1","sha1":"a62557390145bf5226fb0f434168de63b8600833","sha256":"e5e6f8b0953ba3fe6a5215e6bab29369012afac341780ee17f4d661a9e123c97","sha512":"26f5ed68d49b1c747e178b73d56fff3bf9bcce12005264580d5a690f5c596ae3efa2003d1383b1a9ee97ed905f828db6f5de8be5aabc8911657c2f059c0d9c56","ssdeep":"3072:cQvM6mWBhr+CIPSnkjiJuCckPlzbibesHh:NvM6vBhr+VxyuCjPWJh","tlshash":"37b31236ff4b2428f47c027154765661e935781a7892cbd0a798adc0270f26ebcc37ea","first_seen":"2026-06-15T09:40:28.35188Z","last_seen":"2026-08-21T04:08:15.541262Z","times_seen":17,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana25/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"172.67.74.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:55.445Z","timestamp":1785607615445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana25/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sat, 01 Aug 2026 18:06:55 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/1027/64/64.jpg?hmac=Czu6Pl4tTBKy4gvOlb2iQCtN6OhlX-XNXXXhC1naMTs\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewmulLaPNQ%2FCqnqRfh23YO3pbq0ZyuylccHmT1%2FiDcQ1BTQRxPsk0KPbh6ypFCwuLEiuQwaTkNZFhmecm5p8ZT79Q37zHdq96DoWHT85dT1AnYAGpaUP%2FX3EhOa3MgI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a246c78c98a956c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/1027/64/64.jpg?hmac=Czu6Pl4tTBKy4gvOlb2iQCtN6OhlX-XNXXXhC1naMTs","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:55.485Z","timestamp":1785607615485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/1027/64/64.jpg?hmac=Czu6Pl4tTBKy4gvOlb2iQCtN6OhlX-XNXXXhC1naMTs HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"1027-64x64.jpg\"\r\npicsum-id: 1027\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 797862\r\ndate: Sat, 01 Aug 2026 18:06:55 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1785607616.523857,VS0,VE1\r\nvary: Origin\r\ncontent-length: 1523\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1523,"size_decoded":2030,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"1339e6745b9308ba2e9db6d37f8b5075","sha1":"9ae2c555edf3726a8ed74d838ae5ed3630623742","sha256":"802c74e1bd3782114694494173f49f7170fd60882a32b4be80a8caeb9daf1d00","sha512":"ecb0523b4c0711bf8a5c7cb3cbe5884a52a642b18fd873af265ca926467372d74c13758cca257c5b7fd7e4c3e7b07fcd4b703e135725ecbbf2bb9555c8532f5f","ssdeep":"","tlshash":"4031562a3b771a01f72218be056e3b2d5712ed41365477b731801d285d1acf08ea43c4","first_seen":"2026-08-01T18:07:23.070618Z","last_seen":"2026-08-21T04:08:15.545356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":11,"connect":9,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/524/64/64.jpg?hmac=hdpnxvhJPqEyygBGwkDR1YSySMJX6Ber-qdhS1x9cAo","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:59.988Z","timestamp":1785607619988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/524/64/64.jpg?hmac=hdpnxvhJPqEyygBGwkDR1YSySMJX6Ber-qdhS1x9cAo HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"524-64x64.jpg\"\r\npicsum-id: 524\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 223923\r\ndate: Sat, 01 Aug 2026 18:06:59 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1785607620.994068,VS0,VE2\r\nvary: Origin\r\ncontent-length: 1763\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1763,"size_decoded":2268,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"821742468076dfa0339f93c2df32f4db","sha1":"86694b1b1bb7218b0c008a0bfc3aa4584cc710c5","sha256":"821a914452ad228d56d0d067e4535d1306978b6302052f212b1fc12253ac24c0","sha512":"9dab4b83ff45f42f824327eed43f5861d5e335e85b0090e1d1e29d527bb49851747bee33ad6ef1704456bff0de92998a5b60afa7337c7538e3c659c7ef0655fc","ssdeep":"","tlshash":"d931830377a79c05f7321e3f10da0b555706ee841622723b18c22b1c9dabef148e89fa","first_seen":"2026-08-01T18:07:23.071682Z","last_seen":"2026-08-21T04:08:15.565324Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/refund1.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.202Z","timestamp":1785607613202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/refund1.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aQMXXUBSFlGzpxnFChokjvHzYh2FS68tjyssHCCtRvpOSEtHHBgtLmAzUiAso3EWnYFQZZ9DsL7%2FRVb4sljLwLw2sQO5AFH%2Bev4yHePnk20RdXJimp%2FHUV9xZPktC8Zjsqz38y0xwoeuRUR7\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e882a0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6494\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6494,"size_decoded":7176,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aedff0bc1101bb0bbc5411d1e657ca19","sha1":"1a7c10b419d33227f10f3b8c4bee48f3f670c9c3","sha256":"895196e6d98d05f173deb066dad65f5ffa2a4beed791e69e80ee58a0a211c03f","sha512":"f266e05a413065d93e97332dcbaaf64b90672668d1437af489322a415c3e5a881e2c11f9760e72d4be095bbacd4b2b12d319104e3bc914999195147424bd6253","ssdeep":"192:GQUWa2vt2Fu3z5mzb4820H9dQsL7s4XoXb:pUWvzsz7VddQBgUb","tlshash":"58d18d6e9e4c1f70a5057d1185982f245a3bc204cd34e2a8f64191c296cab18b6b3fa7","first_seen":"2026-06-15T09:40:28.321232Z","last_seen":"2026-08-21T04:08:15.539639Z","times_seen":17,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/popuplogin.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.212Z","timestamp":1785607613212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/popuplogin.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtHL10k5ZTf1bGsgT1jzdSJbhaj%2BJjOXyfmb2jdxLWzjNAchpxg96fy9m%2BYvu0ZmULO7bzFM3YmM%2FGqygBEeWQK38O3VUPN8VomTUAGtA3evvA8Fd3A6Vz%2B%2FxYDushMXMWtLszSG3e3E0cDk\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a246c77e98340b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/aa73e51d16f99d6e64587cf2314bf40a-452-73.png_400x400q80.png_.webp","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.213Z","timestamp":1785607613213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/aa73e51d16f99d6e64587cf2314bf40a-452-73.png_400x400q80.png_.webp HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SihLcdtHwXcn2%2BgVgKEY9ezo3RvRk5x50qPYEEynMheJfg8Q0HiMFuZbl9rhAlSKtdqSoeh1%2B4a794z22YogdU1xPgxFfF2igWnKBngxjkWmf0gWkwWata65OTjLiNcRK3wU589akmo7%2B3n\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a246c77e98350b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana44/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"172.67.74.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:59.952Z","timestamp":1785607619952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana44/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sat, 01 Aug 2026 18:06:59 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/524/64/64.jpg?hmac=hdpnxvhJPqEyygBGwkDR1YSySMJX6Ber-qdhS1x9cAo\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjrdEhd4BcQWaE%2FReD3DqhV61Q99aAHED2TKsJqKCpb5NLdQzW9roX1RPGgkP0UyRuYwYyU1hyFkFfCH0HOlnOhKe98lk2VlYiwU%2BDbdiioLH7tXmPGIYnY%2FUykmqsk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a246c7a8ba1556c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/aktivitas.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.208Z","timestamp":1785607613208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/aktivitas.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vklxRt%2FQK1hR87lzwWe3fc2fGRyOvYN3AEm%2Bkkx%2BGmnHH6KQDGpjZRtRasLSZ4R7HLrkzPaRDgPRiPt4R4N3tguFZA3j%2FyQvZk5XyTqdEMMn%2B9rEgRLpihXjLOM3PhFAbq9wPh0WfaperTJC\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e88300b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9061\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9061,"size_decoded":9747,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"239704ee96f99a157c73152a0d2874e8","sha1":"e126e34de7c1a4074452781ec31faf859a9d4f7d","sha256":"35d550c96abda34af866b781ce001d58c5c05e69d4b3e1390ff4c7c5e863ee84","sha512":"b0ef60fe5201546c0c783bec1f06369f7c021352896746c535a0cc31b7faa6cb821351c92b993f69f012ab78f37e48d50effd4b1b3a28aa70b6ef6104be14d51","ssdeep":"192:OqSAkdClWGlD8OJJCgNRrOH6Z5l1P9LP+VxfNh7AcqF+h/:VkggGltJJXNRryO539CV57At6","tlshash":"a112bf1ce3585fb6d78e827018fcd35dfe3c859896841ba6fe900df4198ba0a1297742","first_seen":"2026-06-15T09:40:28.310698Z","last_seen":"2026-08-21T04:08:15.554114Z","times_seen":17,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana8/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"172.67.74.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:07:17.951Z","timestamp":1785607637951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana8/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sat, 01 Aug 2026 18:07:17 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/189/64/64.jpg?hmac=Y8c6_A0AF2zAZdSr0q7LZJ5WG3wcHuJW9xWl3wVASEE\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgwKQLyaAf%2Fxd5eJ6FVjeg7rkEK%2BRTVMVnjmpHZcqCkZ9lJyX6G35g2Ka7ufRkrWIshKldi5vGb0t2GSxzBId8B9k6Dx2ue8PW0qd%2FNUV1BmrWhbHMWGoPXZJzDCTvg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a246c819385b56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/189/64/64.jpg?hmac=Y8c6_A0AF2zAZdSr0q7LZJ5WG3wcHuJW9xWl3wVASEE","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:07:17.979Z","timestamp":1785607637979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/189/64/64.jpg?hmac=Y8c6_A0AF2zAZdSr0q7LZJ5WG3wcHuJW9xWl3wVASEE HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"189-64x64.jpg\"\r\npicsum-id: 189\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1241636\r\ndate: Sat, 01 Aug 2026 18:07:17 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1785607638.983331,VS0,VE2\r\nvary: Origin\r\ncontent-length: 1709\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1709,"size_decoded":2215,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"6b555971baa1762e25781ed0b8371378","sha1":"7af244583b36a6665a032db6187084fb20d36861","sha256":"db57475922ea43d0df8a3709bd26ede751c99d26f1c0be1515819637eca61f83","sha512":"1584d0c679c1ce67768346fff7a56474abdfe2bc8c06747d5fe538086b91e5b8531c5e8d1b4bb4b3635ae954997573066f678251def445400625d754d7209bc4","ssdeep":"","tlshash":"7d31656aaf351e12f7221079005d37539a10ed11fa88667724827b4c0d6fdb29edb7f4","first_seen":"2026-08-01T18:07:23.073589Z","last_seen":"2026-08-01T18:07:23.073589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/hapus1.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.196Z","timestamp":1785607613196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/hapus1.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTf9MP2lVklS%2BKoQgXawjhNSIW4Kvv1cqLRAOjTkTrEqH8qudbXUME9s8ifCV2cHE%2BhaXe9RlV9PUIYANmMy4WKs4xZW%2BBZgYyQc3tujLbJpkIArroDDqai0FZRFh62L09ibyWMaWmtXw6aa\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e78270b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21072,"size_decoded":21755,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"62cfb8bd87a428d83220555bbbad9ea3","sha1":"8192e82dad2da638e136211d376ed6863714961e","sha256":"8d6f802a605bd919bca9665a9c414ef99e6628e41767f4e2514fcf286cbeacd9","sha512":"9133be9bed72706c4d041e107665b0ca7a6391b76a7dcde3fffabedca455345b7673799f88787c1e6ecc82fe1cfe8e121e39e40d55babedb62990be3587252ed","ssdeep":"384:FvLTvxXjQtpnOYnQ0myZOuZ649w6S1/wX2FuiQoKQc3/05FBFrmyp:FhuOYAQJZ64K8mFxxKQe/05Fr6yp","tlshash":"5092d0249e4fe0df5f9b01f9b9506cbba764621b7c6a128153e36141db1d33f161ce05","first_seen":"2026-08-01T18:07:23.074476Z","last_seen":"2026-08-21T04:08:15.550975Z","times_seen":13,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/b2.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.205Z","timestamp":1785607613205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/b2.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jq8yHrDTnS53sZLZYvZ5sLUv1dOb3r2F0VCHkqBhVzLKGnRmVim5lKfAsET%2FbOdJNSaIiXtdmyDvK8QndwGfXF%2FD8pI0qdvA0bjcH%2FEGRD5r8X5Zt3ZZW82pYLAusYK%2FZFKBLtzAdfDtNnNI\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e882c0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 458061\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458061,"size_decoded":458747,"mime_type":"image/png","magic":"PNG image data, 1000 x 450, 8-bit/color RGBA, non-interlaced","md5":"d806531187d8c46119c17eba15549a18","sha1":"b8cbe7dd31f331299324f888ccb283f6636796de","sha256":"a9ad0a589499afe36d5992ce34c0d2189aaaf7bca9336e32b898d3d52653aa2c","sha512":"a8a64b2a292461ffe1ff4eb696062566edb27d6c95ced80c5bbc5228e85a841bf73a3a061f21da86745a6f07775c54e8e70e8d1efafc5f769dcce4c690cf0a4a","ssdeep":"12288:EoES50UU1s37HstEfa0R/5VD0IUWe80VPcYV8AzAwLm:EDBUP7MtEfaojDknPckxy","tlshash":"baa42313d131c49b6ad4ec9d95551b531c78fc3fb6eb32436aa9dd2a606a20fc3e1a0c","first_seen":"2026-06-15T09:40:28.346698Z","last_seen":"2026-08-21T04:08:15.540475Z","times_seen":17,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/saya.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.212Z","timestamp":1785607613212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/saya.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZMk932TC%2FsUdhvA5V%2BKTSM1dTe1teIXUdwnEBXiGKdhWQAgkSNZ7fJ%2FhtMofeaVQHMa3vOLJTgpionbnw9ugN1cM%2B6SlmUaVSNF3re10oZDOXTIWbnxGBu3rYywSScME9pt5NDfBHKYqDVo\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e98330b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13520\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13520,"size_decoded":14205,"mime_type":"image/png","magic":"PNG image data, 113 x 113, 8-bit/color RGBA, non-interlaced","md5":"4cd5ae08cf3cc70b89cb5b2156ff7fa7","sha1":"bc179146ee6fe4f67831cb66675995ac30439ce1","sha256":"98e7950f714c91231f14868c131da1f49f3129ec947bc37b74c67c17bb524d6e","sha512":"421e168b082b9a8c0660ce8caf5ab1efc476106e1c2c5391ed161c6e132348773c81f2d316e1d7d7ab0ccc84d042fd17dad9452e6cb1cc70b33070874c43a6d1","ssdeep":"384:vJ5DaJlBXWnmFiP65bXhgtFnPZdD3+mlk4eb+IzYF:PIllWmkP6pWFnPZdDblRe5I","tlshash":"6552d05d8110a933cfc440b9be58837b56def948089e0d2d2430d2927435cd3b7fa987","first_seen":"2026-06-15T09:40:28.322369Z","last_seen":"2026-08-21T04:08:15.549658Z","times_seen":17,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/logo1.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.188Z","timestamp":1785607613188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/logo1.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:16 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUJUEeY3gqUDWq4wySZ9Ew80cAh%2BQRRM7p8F0Jsa18lkFjWfSnkx0lw9PVB9A0u1EEX3E40AES3j9%2B%2FA5nw1f%2FYjZTUaQyntmuumuOX23bVgEV6kZv98GCAn8v39DQw2yNUwEADhg8kndRtg\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e68240b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":1924,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52413b81c98ffd7edea500c4151d33da","sha1":"104c8baf88cd410c415fe5e73a451cac7cea377d","sha256":"a7f7d20fd5ac38f559317e0672bc1a5e071c7e18d504ce0834592c6d6e3d8399","sha512":"7139e11e5f16288c880e876129cde263139cc25f7ef62dc29efb540e499d62d205afd0d4d245c90232c75add160f954d81c9b4ab933cc243acb335176c9fc364","ssdeep":"","tlshash":"fa21b4614430b102e38e698ed1f95a36b0e82420b6c2f2030f01ad6eea67e81a133402","first_seen":"2025-06-11T19:32:57.524982Z","last_seen":"2026-08-21T04:08:15.550338Z","times_seen":29,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/beranda.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.207Z","timestamp":1785607613207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/beranda.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvVT6a0Dw9jtPOoWaWp0EcvlEPd27yUiL5OeR5sWuMZm0POm6GWSLhimRxERJaYiqIsD%2BOCuG8QV5eiVU78gg3SvejZOpnVyXTQnCBnT1648koHtfpt6PByM%2B3ZMT614Z5B6jXMkyIJwOlJD\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e882f0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8901\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8901,"size_decoded":9581,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"a2ca3c7cc1b595fc2ec716df756d52fd","sha1":"1c5423a17b873b52ce134874bdb61a85571463d9","sha256":"c8a0b836f726e6479c0b3a49840d8d7addbf5754b9ed2cfb538f88e2bc616bbe","sha512":"5378f8f26757edddef8f10bae9292a94c165099582b705917bfc55d375ae73250c080d806def263fb41ee5a1973276c96120e6ebe3b7cdf9ae2a3022be95a5d3","ssdeep":"192:bnjhS2rqyrPkYmoE9vMfvgg4f9nvvKTus0E+lOYvneQPMvTsUw:bjhhr3xmoEA41URTYmQPMbs/","tlshash":"2d02a0bf21afd0adf71b08f15bed3d5b8436005f55f019fa8982b82a630308139d6729","first_seen":"2026-06-15T09:40:28.348955Z","last_seen":"2026-08-21T04:08:15.563926Z","times_seen":17,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana45/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"172.67.74.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:07:08.953Z","timestamp":1785607628953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana45/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sat, 01 Aug 2026 18:07:08 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/835/64/64.jpg?hmac=GeYiPY2TUmvwIr1RMOzf6fJ7SMZtWoTjK4Pn1x2YrwI\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwUqyBQtzZR2zuvu%2FqbvKVuqwT3HtjsrtMaZXvMIOJVM3Qveip5xrW7M9N2MDILj%2FSNPAqPM3WPMcs153Uw3zhFXcZUuoKmcxgYNMH0%2FXmFkDGMUtuFrA9NqQLGW73U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a246c7e0fce056c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T19:26:52.117381Z","times_seen":18040627,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/dev/cs.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:52.989Z","timestamp":1785607612989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/dev/cs.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2026 06:28:38 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMF9hcdhQNPXjfIZulf2Osq%2BObP24EKnTQcqiyBVFY705%2FSZKgwI5j0afpEvlVK9mgkrtxk9sgPZPxhrVt41%2FX4McE6dvPXSC02LKtC8GfZif%2BDIb8SLZLbLnHlqGchhGKibSqErxG38QxCN\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77d38150b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 812795\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":812795,"size_decoded":813481,"mime_type":"image/png","magic":"PNG image data, 976 x 976, 8-bit/color RGBA, non-interlaced","md5":"f3cee462778d7216aa2b2ffcf9d5b7ce","sha1":"57df47f397dfb0482223cff93821e03ed1a887e5","sha256":"ebe4eadd80206b3b4b9dd593f83c9897c812e456ce24f901782397cc3b835be1","sha512":"ab5ac5063799ceaa51406a78ad2a0bccb47121f6c285c83cf6176432b1b5b7d27c6634d15340fec2345db4171d34de035f478ee27e0b0fb066e7cb68702a047e","ssdeep":"24576:9eWFlS/P57YG1KyUFnwNuW/faQWOhRTB1Wa6jDRtI:9i/iG1KyUFnwd/fOeJ6hU","tlshash":"960523b6d864bc54f79c013ef98c86827a8a504f47bd85877b2cd0f8f39ca261c525b5","first_seen":"2026-08-01T18:07:23.078429Z","last_seen":"2026-08-21T04:08:15.554767Z","times_seen":11,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/cicil.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.190Z","timestamp":1785607613190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/cicil.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:16 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nqkKRA2PwI6XAfZuhyVtNIlhomXeNGvCI4NpNj4di%2FzHtumuo2420duS5V93jeXyiVmoUAeZatKjkeLnRBmavboiUcKt07YALDUH6BA%2FX9fHXD2QfkGcB%2B3HD1ecD8mEISV1jE3c1YsIEVe7\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e78250b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28600,"size_decoded":29283,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"69c4eaedc29882d64ab88400e577ad1c","sha1":"020408ebfc520ba2ff1addbbee8676fcc4725c17","sha256":"516376a17db063e35b5d26072b32aa6b0218dc7edcb0219a750f2e0ec30bd7d6","sha512":"bb3d063340b4427d044664aee04dbc3bb706f78bd491530bb39d7565b95f4a50177350b71287d9d8835dddeddfc5576f416d0e1544cb29cc515bc8c486c52aa2","ssdeep":"768:MjPppwmsX3qS6eg01aDm0pTrWDT3g0NwF5zAyxh8KG4C0MmGfkx:SBpUX3q9eg0ICyf6M0jwhk4jLx","tlshash":"87d2e1c776e68d2e9040672f73689d020dd4ba12c854c237d9bb344f6247584eeb7ace","first_seen":"2026-06-15T09:40:28.342967Z","last_seen":"2026-08-21T04:08:15.547047Z","times_seen":17,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/promo.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.198Z","timestamp":1785607613198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/promo.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:16 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJTSFTIOPEecgtjuVll3LRo4y4b3KEbncpOq6XIJ3tDN75AlVurb5L0JAfAN1aODWmuMxkvJJT2yV%2Frc14LGVtiqtxLqWQQx8WSwWbMmrzSRdo8yaZ6r81p%2B3XdPPmw1Y%2FObXG%2FBTUrHgDE0\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e78280b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":3464,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7076931408bd8213139bdd2b07184596","sha1":"444fbfeacbad9104d8a89bded2f16a964018f681","sha256":"de65dc623ea9951a93d14db0b773596a7da1c33ae4189e5141b80c45a3d37fba","sha512":"2dc7b852933df00ef4490abb253d5c1cf987d7c5bf6ae9c932f96243220dc150c5424516d348861343ca3deb5875970a0a03de41342f14c8ee8da31151b187a8","ssdeep":"","tlshash":"9f511854cf980074a1fab5652888b9e78948f08f0669c56d13b1aeab48162de4e3237a","first_seen":"2026-06-15T09:40:28.327934Z","last_seen":"2026-08-21T04:08:15.553425Z","times_seen":17,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/dompet.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.211Z","timestamp":1785607613211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/dompet.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8ZMpTkRCWUbYNXyA4ZwknHqpeoZmo3q7XS6dY8ppC05aArDXRyqIRiGxKEWwlygyzTbFiaNwcBb%2FLLuyEE8347BQQV%2FABnjMubUKeKWzdNClvRFxlzk9lfpPvnl4Gsc87hZxWwp969rW9EP\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e98320b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6924,"size_decoded":7604,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit/color RGBA, non-interlaced","md5":"d61a65f02e7a894d2bf0b8ff162c2be9","sha1":"02788353ca850b478415e527dbdfdc0e85b72a63","sha256":"4f61915847e9016dbba4a7e0fe8ea25d25413c7b1eb34bae93688cbb6642027f","sha512":"f345be21e819fa98463a762e3088d60f1c4341f3335a44a201edfdbc574d872428ed907bd34011562c35051aa4a26365285bd9ebfa9cbe72109301b4cd601718","ssdeep":"96:HvGyVZxoxBdlK6oAnvTEbQzWio/N9bt36eTRMLq7nnx1w4qnOq/DmSsfGEfB:O2x4BO6oAnLN+h6emGTxyJOQDLgTB","tlshash":"a0e18ec412f7a4a1c130a7727cfb3be2e6b7742c6812006b524ad80ab35fe067a53785","first_seen":"2026-06-15T09:40:28.312449Z","last_seen":"2026-08-21T04:08:15.558376Z","times_seen":17,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fituree-menupay-id.offcou.beauty/icon.png","fqdn":"fituree-menupay-id.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.662Z","timestamp":1785607613662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: fituree-menupay-id.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sat, 01 Aug 2026 18:06:54 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqIZoHhStvGHyMfPbjTeCGpiLNgMRDbh9RcML%2B8Yd4WUtYoTsDbMJ8fbOfAOC%2Fid2IsmsF7NxsrG4VogxVyYMZV4iRd9ZmWT0nv%2FHPc9J%2BMmE6QXjx3IuTq3an7xv3cZCm1p9unkPLIK9ps9bpS3rD1Tgg%3D%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a246c78168580b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":922,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-22T19:31:11.781281Z","times_seen":58823,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/835/64/64.jpg?hmac=GeYiPY2TUmvwIr1RMOzf6fJ7SMZtWoTjK4Pn1x2YrwI","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:07:08.983Z","timestamp":1785607628983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/835/64/64.jpg?hmac=GeYiPY2TUmvwIr1RMOzf6fJ7SMZtWoTjK4Pn1x2YrwI HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"835-64x64.jpg\"\r\npicsum-id: 835\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 391889\r\ndate: Sat, 01 Aug 2026 18:07:08 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1785607629.987809,VS0,VE1\r\nvary: Origin\r\ncontent-length: 2079\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2079,"size_decoded":2584,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"396a5a4e18468eff1ea3ca61f2f2a6a2","sha1":"f84792077300cfd4da810bdcb4a3dd7cb4917390","sha256":"bdb0d6d75e438665fae1db9f7670cf0ced199e89ce5da4dd6520f13cc47c0f54","sha512":"d77a7afd041bcbce1f8fae813e320c7ff6cdf52ddab73053af8efc3377dbfdbb7ce8af9bcf53a19447aff4ecc14a314140ff2c8a7b75ef1b80a9e618635b10dc","ssdeep":"","tlshash":"e741c81a7f734f03cb530579c4bd2731a960f88a17d5323726807d196e97c749dc1aa8","first_seen":"2026-08-01T18:07:23.081786Z","last_seen":"2026-08-19T04:06:51.16304Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/b1.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.204Z","timestamp":1785607613204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/b1.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Igp%2FZFSwNEkhOATzEL4h%2B3SJDpCpwOU4UBa6bH6sa2zVrTgd8u7TGvS2QX6hug1RCKqhtkHfSQkAsN38g%2FHEZysgvyMB9qTHXjUgtmbwoAFUkIC8JvigBWeJATfpSwn%2BC0ba0p%2Bw4UoakR7\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e882b0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 398189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398189,"size_decoded":398877,"mime_type":"image/png","magic":"PNG image data, 1000 x 450, 8-bit/color RGBA, non-interlaced","md5":"b6600362f078cb2b36862092b7d6e93c","sha1":"401be385c721b9cd1edfe1693a925fd2561030de","sha256":"ad45791ca5f3defbb62d19a40a18b764e42c1b20ac461038487759da18a8a381","sha512":"9321cee0f59bdf0fdd67f0a3be0e928495f2f8a2d561153583d6cf6a288a909e97ed6fc71cfbfe9caf0742cdd7d2b35f59c3c49ff47f83701b66e3e1d4aea5e5","ssdeep":"6144:YdllxJe1WtuZZjzVhBmov3oDkvqMEI4wy0+sVnEo6tgknREeuBKLWpo2zFRGn9pL:Ydxw+uZhBdv3oDpMWBs50nueYpGbn9rB","tlshash":"4c842300f47e00696528181150e0bdfbefc6128bba554def39d16f369cde6ed5a02a8f","first_seen":"2026-06-15T09:40:28.329013Z","last_seen":"2026-08-21T04:08:15.557286Z","times_seen":17,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/page6.css","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:52.740Z","timestamp":1785607612740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/page6.css HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 10 Jun 2026 22:18:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwiSdqJQo47Ge0NxRqM8fCDbPyv153XI3UcH8lHYnc8b847b2s4sFERw4Bmnm2NG12NLnmOYorK2fQVYzl%2BM8aPsvSU4rNjaf6tFhUz8wwepLDGZ2H0fQ%2FYvRpbWVB7ry7ipMU2AH4xOWZNy\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a246c77ba8020b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30491,"size_decoded":7908,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (393)","md5":"bfc5b142b686db0583e4cab6f7a03dc5","sha1":"4563fc1aa3a53480a05b911241d14283601c96e3","sha256":"831ab091fd36d0528cc638ad9d3db08f853a48ced33880bc74d7462d0ee5d1a4","sha512":"ca4cc1b6b29084e1ae54ec5e976db037e4916e4b2a8fda9b95687c5964eaa2ec06757b095af6d6f288aaf50d376223e75bfb143b6b42d6737d17004fac4f5c51","ssdeep":"768:hdokDySayBWlkpOAlRWuVP9ih4VEwgZ+x:7okmSayBWlkpOmRfVVS4VEwgZ+x","tlshash":"5fd2852353052409fa57e2947ea6878e513dc503f2068ebc7aed24a9cb4d3c845fb7e9","first_seen":"2026-08-01T18:07:23.083541Z","last_seen":"2026-08-21T04:08:15.544525Z","times_seen":11,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/dev/live1.js","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:52.977Z","timestamp":1785607612977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/dev/live1.js HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Jun 2026 17:13:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYHweTjO29ZGSsTlKP0ivpeVs0eB1vf2tROK%2BebMcJigoqrXOxV%2F4aQmHjbk%2F2dOxLqxi7%2BNwW%2FmrtLmE6wI%2Fdn2oB9P1dVPserO9vhbzm78co2p3O19VhtsPXme97HUeTS5qyZCGlZG5T20\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a246c77d18140b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11404,"size_decoded":4880,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1127)","md5":"a3bb1ab339bdfc5d64b0afc65e54ba5b","sha1":"4cc1b882dea5154ca4aeaf515ec05aea96c2023e","sha256":"026faf52ff3fb5c6a886d8db4b13a89bf2ad2517627398ad9aead1c3927a0df6","sha512":"9b34452ec94a5155585a88cf75c617d3feb090c5d520eb99a36d14ebf10bdd2a77e8774baa97f1ec3cc58b82f4ce5466b1142298e46d5f077ed8368dbddd17dd","ssdeep":"192:6q20qIMMP9kom5NWOa6p20kYxd91rWyu2jGZaoi:nVqIMMVXmRlp20TaQf","tlshash":"e63287adace320765d52c7f58abf622435e9d913848dc015b92ce3600f88d49f259dfc","first_seen":"2026-08-01T18:07:23.084487Z","last_seen":"2026-08-21T04:08:15.537183Z","times_seen":11,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/bg1.mp4","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:52.996Z","timestamp":1785607612996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/bg1.mp4 HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fituree-menupay-id.offcou.beauty/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Aug 2026 07:47:41 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FQd5ow43PIg8B%2FEmnleD9bA2sWpOXG93bHIESXMoPqT8K%2BPDC4P7JkmtHy8XTE%2FhGH%2Fz7EfPsliJ57eTn4%2F7ruZCaM5aQs3ggYmD2NxStAJxruuWjA7KgGGdVCGFlz%2Bl7GUy8%2BwRbMq%2Byu1\"}]}\r\ncontent-range: bytes 0-323235/323236\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77d38160b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 323236\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323236,"size_decoded":323951,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"08f4198364714bc99778c50ab3e8784b","sha1":"59ce2b831e2180433ef31c0219ac812520b7221b","sha256":"d825dc4448377163e5a1a9bdc40e3d55046329adc435ff644e0483a847905442","sha512":"7cc38cc242f5394e8ec797437283bfb82802686cc575090ea2522c13dc7924d7db58f8f98eb757a0da324f34dd7e53fdd6b21618c17a3db8be752b19cdb54bf2","ssdeep":"6144:MjJXNsaRrFbBdzAEM1maGKVYDedCi0/5A1FsXah0:qpNsaxdtcNVhdA5A1Mah0","tlshash":"b6642206bbf554ebe1a841750ef3c342333dd450ab6b96176ac67122fdf8292af1148e","first_seen":"2026-06-15T09:40:28.318019Z","last_seen":"2026-08-21T04:08:15.552692Z","times_seen":15,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/populer.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.194Z","timestamp":1785607613194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/populer.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:16 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zBbKhBZLSQz5GXoEqD5Tqwdae7d17hi7a6Rsfbt9tkxwiV9Pmp8zhrp%2FaG7CgwTCawqe6rwy8ypf6zLHgaQ5qzXhHdvpt2M3ghtndVlDDolM6GhypginukBrLm4WbA8NV2k083jUA9Z4Q4j\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e78260b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2648,"size_decoded":3326,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cf9d6a1a2b204f30b6d85304d302789","sha1":"d12ff55c46f4fde2c83642b8dc577ee428aa2df6","sha256":"9a68e7f383ccb428b6d7c02dff84117685f2eb22b9117da12e7df993aaecb6e6","sha512":"5c1be68e4527835571822a44880c43a2ddc660c3d9c72ef5fbcfa3d69bb87e97b82cf639f16e82be49a6f73405323cad245ac57eca110c6c8f622d4b9883c2ca","ssdeep":"","tlshash":"bc514c46226eb9c692994cf1d303ed1420c1846a742d29ac2e7647e2461f7f9bd9c37e","first_seen":"2026-06-15T09:40:28.306895Z","last_seen":"2026-08-21T04:08:15.555598Z","times_seen":17,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fituree-menupay-id.offcou.beauty/","fqdn":"fituree-menupay-id.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T18:06:52.127Z","timestamp":1785607612127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fituree-menupay-id.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:52 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Jul 2026 15:19:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7WzJ4H6R49r7eoZwYFQynUOyxYeHJwaPPdJjDkWX47QN9pqGmSDaJQqaKcHWa2T874ho3CPx1u9A8adePxb4DsIuhLekrY%2F2YPtPgKXssGUAQaNfCMopPGlf7V58RAcmfcZEC1il4ty3lcKkUPrh3EilQg%3D%3D\"}]}\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a246c7783fa50b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22224,"size_decoded":7660,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1493), with CRLF line terminators","md5":"db218794e0a492a2c0dd4a2a13c5f929","sha1":"52137b5ec0cb865e9a007036523599413bf5dd6a","sha256":"8f2430a070ea4b6294a3c87aca4b658880f26bb1cda186a8764b16b9abadead8","sha512":"b70b14ca65d2b673e68277c5b0bd6a10995344d105dbf071fe8eb11e433b9281ae6800358ac2b5ca36c6668ff1c410ab708ad56058a8510ffeb5edd489a72350","ssdeep":"384:KXY62HoGFAOzK+fzUJq8KXA5EEgXb6/6rB2vcaYneWZ:WGFq+fzuq8KXA5EE2i6NGWZ","tlshash":"1ca2a5315184343641b787e989a6934efda7825bcf47842436fc8be60ff2e85dc27968","first_seen":"2026-08-01T06:15:40.371126Z","last_seen":"2026-08-02T00:19:49.792595Z","times_seen":7,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":45,"connect":16,"send":0,"wait":368,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/logout.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.201Z","timestamp":1785607613201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/logout.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyK5AdDsVFJZbwelunt4ihBohAlE2DdXjs9KNbdi2dl20OMiqys64Atw6EL4yEBw0EDLyJq6PRcGAmg8xl5gKywHqbzwboFIDUiEdlceWwXygbAMdyi8E6KzuThE7VGwQYMzcHtWo%2FWBwZtF\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e88290b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26870\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26870,"size_decoded":27549,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9e96cfa0cc78c8cc31344d4701d6e7ff","sha1":"e6aada969ae5149c90e4f32a327766cfdaf5ac50","sha256":"951a16b1eff0e68f1be016285a80b86695b996e5c51cd4c63650e7755a5db802","sha512":"badb97d449d226eafc28d4c9b9a64ea32841bd4c3b4422d6fed7545bf1fca5bc1c26de124876bc55ec7cba9f119934c456b7386ff53b5b0573434e97f520e33c","ssdeep":"768:w1U30QUThIb08IkSCh0rZPhcBZThA5HkuouZa:kU5UThIbakSk09WBNKVouZa","tlshash":"f3c2f12dd239cabcc40405bab215f17de2116a539233952c184e435aaeb72e4dfd3f9e","first_seen":"2026-06-15T09:40:28.35625Z","last_seen":"2026-08-21T04:08:15.556284Z","times_seen":17,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cssnya-adam.offcou.beauty/mbgku_cuy/b3.png","fqdn":"cssnya-adam.offcou.beauty","domain":"offcou.beauty","tld":"beauty"},"ip":{"addr":"172.67.180.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fituree-menupay-id.offcou.beauty/","date":"2026-08-01T18:06:53.206Z","timestamp":1785607613206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcou.beauty","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:50:16 GMT","end":"Sat, 10 Oct 2026 13:40:19 GMT"},"fingerprint":{"sha1":"55:92:98:1D:D3:57:3D:32:8F:86:89:40:BC:2B:F6:24:5D:E9:EA:7A","sha256":"B2:49:61:C6:B3:FD:D0:9E:20:45:69:9C:F2:39:1E:AF:DF:9F:FF:79:D1:EC:2C:4D:9C:F3:2F:45:C9:36:87:29"}}},"request":{"raw":"GET /mbgku_cuy/b3.png HTTP/1.1\r\nHost: cssnya-adam.offcou.beauty\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cssnya-adam.offcou.beauty/mbgku_cuy/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 18:06:53 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 04:55:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUkhbSbxGDRkn64ZLXwSYKyjUnPmYipWde%2FW69qozV8A19X81T7BP%2BLQ2Qk%2FI3k78%2BjKkXa3BofCRHNrX7MOSChUiKQOkHpaifYFDha9b9Vquviekaxr18RdIJiU9zkvU7sUXiNleyEDkcaG\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a246c77e882d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 390438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390438,"size_decoded":391124,"mime_type":"image/png","magic":"PNG image data, 1000 x 450, 8-bit/color RGBA, non-interlaced","md5":"c59c6f24449f651d5a334b90a40f10eb","sha1":"fa91b43c3ea4a02799978cd13595e56a1997e602","sha256":"98e107264e718eb4bf6c8b34985599e75dc2763911d395f0ef5b49b531016561","sha512":"fce693762f54e6f6e0842318cfc6aaf35df30ad3998b8ddf8eff499e9239eecc78d53cbb4f83c7edfb776f28d2177e393959c31ede088f08be0594bfdc448bb4","ssdeep":"6144:ufgY/19+mNcT6+GTixwU4yPb5tjcp5LXCKss1K2wd5LOsx288oGAYK8JuEnnceGn:ufgi19c6dRyPb5tjWLydsY2wdNL0zoGi","tlshash":"798423c3b5bfbd7ab4ac47749ac55ed64a3977389928d0100c1207e158cce9829a9f4f","first_seen":"2026-06-15T09:40:28.347866Z","last_seen":"2026-08-21T04:08:15.54899Z","times_seen":17,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}