{"report_id":"b2d9fa56-eb00-49f3-8681-8478ab3a74d5","version":0,"status":"done","tags":[],"date":"2026-09-13T18:50:34Z","url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":0,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"title":"Türkiye’nin Lider Domain \u0026 Hosting Markası | Natro","dom":{"size":9257,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f015201b54f2548bb96997ea54b19f0b","sha1":"975c68e9e9a58c55ad9cc906d34214bff624bccc","sha256":"8294c8208aeded7e6a525bc419819e01da22daaa0a12450eba21b81624e0ba3f","sha512":"5805588ffd80c3b06d69ce01900fcb5eb08dac31f48c10b3a80b223e62dc9516f7eda128874903f17d4e09193161dd8b94a20f8cdfb5f52c20a1fdd469f27ceb","ssdeep":"192:TQdJQ889Q7IQ/8eO3OHaSGm/ZdFWC9umA5FDk:TQnQ8QQEQ/fuef3dFEDk","tlshash":"bc1264a794d5882a3252c29675e2b41ced469107d228e8e5fedc43fd5fc0bf384a326d","dom_hash":"domhash05b32666ef91e9e4464614f65afa905b","first_seen":"2026-09-13T18:50:41.246398Z","last_seen":"2026-09-13T18:50:41.246398Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":0,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T18:50:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"emsayapidekor.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":2,"received_data":1061601,"sent_data":957,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"emsayapidekor.com","ip":{"addr":"85.159.66.62","port":80,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"domain_registered":"2024-08-17","domain_rank":0,"first_seen":"2026-09-13T18:50:36.56823Z","last_seen":"2026-09-13T18:50:36.56823Z","alert_count":15,"request_count":3,"received_data":15314,"sent_data":1310,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"www.natro.com","ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-03-02","domain_rank":328614,"first_seen":"2012-07-17T03:01:43Z","last_seen":"2026-09-13T02:39:49.118723Z","alert_count":0,"request_count":10,"received_data":546331,"sent_data":5706,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":80,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc1760e71022725c3e6942c1c224635a","sha1":"c1a819887c0f83e7c61c37229cb3619f7dee0c50","sha256":"d7a625194ead9228fe09a5dd58a43cc0cee98411de16d108d1a4d3f31dbab9e8","sha512":"4a902aed21ccc235058e62f2258bb80e5b8af89c7c0715b6ca3587b1c4191af6910a1bc651d3209516391466855b39aea80382c941138d08df94433eeee8de4e","ssdeep":"","tlshash":"83c08c689864147008263fb875a2280833e02a13080ec22dbe1ce3412fd9b195ba67ac","size":185,"data":"","first_seen":"2026-06-08T08:50:53.68197Z","last_seen":"2026-09-22T01:20:12.243491Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":80,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ce935a299ac53d78aadc9aacbb55803","sha1":"7bc628714847c0c349354cc3e79f078c8f4e02a7","sha256":"80c41630e6ef16653aa79d40f27f60369b20757325622ddd44fcc2f66b6bbc8b","sha512":"391b28ab5957fa7e3c2fb54510ba9fbf9d18c2e08df8c61d9b1733d316fa630ffa37b0068f79e945a311de004092a0cdde88bb65c09d3d139b40d2c0ad9e4601","ssdeep":"","tlshash":"70f00e4a30b7326c5053f9eb837b8d2ab11e420f824175a3fd2c836c1fe0268076979c","size":581,"data":"","first_seen":"2026-06-08T08:50:53.683027Z","last_seen":"2026-09-22T01:20:12.243991Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":80,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d627c3088a5b6c935ff041685549fe10","sha1":"c8ea06f70c482299a5256b43e4b9c131bc135acd","sha256":"af62f7ced7d29113c3b7ac872d700ee426b6b742b3566fc1c53441825ed3c815","sha512":"7aaf04ca33b7ebf82b0948ed1b3565eda5ec7a4ae9cf02a40adc8c9bbcd8e1bd16e422fe9d01fb662954ee4cec982cf76a99ff1334e3399893c06b7f220a2036","ssdeep":"","tlshash":"5da002d36f434c2410c862cc4f6484895150e0072279dc313f4d688c2b10e257514228","size":64,"data":"","first_seen":"2026-06-08T08:50:53.683993Z","last_seen":"2026-09-22T01:20:12.24454Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":80,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"63255db9c40febcd0658866084edc834","sha1":"31855072692042a72ed5e0cd0ba0728f315e4bd7","sha256":"8c4b6618802ea6c3274af30d242b8813e236beebdd9287f32543f5acdafac6f0","sha512":"a247cdb9332883b2378826677e3998b1249c86b2b3c34aa99024516ccb35e9220e46aa2346611609d1b57ad3d10224c81f42338a1a3e9363d2b5f88bc613d098","ssdeep":"","tlshash":"05c02bcd2a0b0cb140d73b818f2f7101b001321060f00c31080a73449620e2ba34cc50","size":146,"data":"","first_seen":"2023-03-26T09:47:45Z","last_seen":"2026-09-22T01:20:12.245112Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":80,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"df888c0fc869e8ee039f22a8181aab5c","sha1":"d4f1a27672f9f08147cae85236e9b1b3ab153edc","sha256":"05130928aa4832f1f9534fbfff0f163cab124e99e64cc58b5bf40c27049061d7","sha512":"2e12cd00883fcd2fe7942a47c7864724462b9ee286b16864594fc7cd5a5f9dfb45f4a790e4e6e91fae53001c20b59d28e632584a0af951975d2d375475868a69","ssdeep":"","tlshash":"b8f0abcb76db18742d4b91765b3c8e247112325ab0548033bcfc88392f086be4966be8","size":516,"data":"","first_seen":"2026-06-08T08:50:53.685669Z","last_seen":"2026-09-22T01:20:12.24561Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-22T20:55:43.263273Z","times_seen":102889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-1064986870","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd2e8ded34c49ee1c10d698e22a80cad","sha1":"19410fe88aa6275e6a818d663508ef3d1fa056e8","sha256":"59f8462d1d81a34232e755dffc604d443e94f8f3ca74622e30ba9bb57e62e8a6","sha512":"8a42ded0042c5e7def03f394e79781b467dd61a301ff672066a07867af7d370bfe51448538783de93630f335751a3325bbc199f50ab46ee0f3ca7781ab4e788e","ssdeep":"6144:lcif1L6SbQjmgyyE3RdJl580ucTPbNELR3/j/xPS33ON3Z:lcsq+y6Pkxw3Op","tlshash":"9aa42acd73d674229392f174903f018ba67a39a2b48cc899f18adce42d3459a9177f7c","size":478573,"data":"","first_seen":"2026-09-13T18:50:41.252401Z","last_seen":"2026-09-13T18:50:41.252401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P4KC6PC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4b780ab15f9097be1fff91f00fff8e9","sha1":"e6bebba28af257a2e6a2f6457f56402bbc55552f","sha256":"c650b9aef62c2c79862273f74fedcae19f8b36065c90cd9f81bd73e4054c1103","sha512":"82661593557e1ac25edb5f4d4401d5f6b60c21fa9d48f6cc0bceb8dc0414a46d7f6815d018e7a7003f458359087a1f370bd4b475cd5a983023588ec0990a5480","ssdeep":"6144:I42la50f1L6SwQGmgyyE3RdJl580ucTPbNELR3/jcCZS3yN0tmZ:L2laEh5y6PFCKqP","tlshash":"6ec419ceb3c67436c3a2b574903f018b663e29a2b44cd855f18adcd42e3456a6163f7e","size":581794,"data":"","first_seen":"2026-09-13T18:50:41.259601Z","last_seen":"2026-09-13T18:50:41.259601Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/plugins/bootstrap-3.3.7/css/bootstrap-toggle.min.css","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.246Z","timestamp":1789325397246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/plugins/bootstrap-3.3.7/css/bootstrap-toggle.min.css HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 10 Feb 2020 15:26:15 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=O9egf1SplngMo7uayr8oidmtZi56jk7GFAugO1P6__Q-1789325397.2776444-1.0.1.1-puCXESMNKp.vhYQ28zeMR9WROw24e.CKqSabSv7Dh2IHv_3y1nvGJYFZ_hstly2VwH01H8NS1EnxxfD3ojvXP0JT679LePWAqnmd05NTnW8NVVZTuXmfWjma2Gunjtbr; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=2fneCz3FfrP6YoY3fMOFAOmStlllQ3BReX33vppQ0ns-1789325397.2776444-1.0.1.1-fSJTGTaHzkpMCpqwbZ7AzZR9x5i3TdqXqq_ZXQbPMZo; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"5f62ee6e26e0d51:0\"\r\ncontent-encoding: gzip\r\ncf-ray: a3a955b4fd12a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"O9egf1SplngMo7uayr8oidmtZi56jk7GFAugO1P6__Q-1789325397.2776444-1.0.1.1-puCXESMNKp.vhYQ28zeMR9WROw24e.CKqSabSv7Dh2IHv_3y1nvGJYFZ_hstly2VwH01H8NS1EnxxfD3ojvXP0JT679LePWAqnmd05NTnW8NVVZTuXmfWjma2Gunjtbr","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=O9egf1SplngMo7uayr8oidmtZi56jk7GFAugO1P6__Q-1789325397.2776444-1.0.1.1-puCXESMNKp.vhYQ28zeMR9WROw24e.CKqSabSv7Dh2IHv_3y1nvGJYFZ_hstly2VwH01H8NS1EnxxfD3ojvXP0JT679LePWAqnmd05NTnW8NVVZTuXmfWjma2Gunjtbr; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"2fneCz3FfrP6YoY3fMOFAOmStlllQ3BReX33vppQ0ns-1789325397.2776444-1.0.1.1-fSJTGTaHzkpMCpqwbZ7AzZR9x5i3TdqXqq_ZXQbPMZo","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=2fneCz3FfrP6YoY3fMOFAOmStlllQ3BReX33vppQ0ns-1789325397.2776444-1.0.1.1-fSJTGTaHzkpMCpqwbZ7AzZR9x5i3TdqXqq_ZXQbPMZo; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1182,"size_decoded":1676,"mime_type":"text/css","magic":"ASCII text, with very long lines (1179), with no line terminators","md5":"b99d1618a2b6daa68c9f670272148766","sha1":"83ec6a81c44a05ad09509a900af048a2f02fc85f","sha256":"301fa576aa3c1c609d261af6a5f132ba374488ff44088b619803996caf12ea57","sha512":"89eb4c8de155e5b48692029d5277b28f7936e0942dc95c8f90edcb1f5781f2e2c20f8fd534ad8d691310656125f4de7ab9c6ae08fc0e9367e137ed6870fff1a7","ssdeep":"","tlshash":"84213d3339553dbad82bd142eb916c997574530fbbeb0486f181e9a3cb5ecc419212ec","first_seen":"2025-03-28T15:42:09.836899Z","last_seen":"2026-09-22T01:20:12.235225Z","times_seen":189,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/plugins/jquery-fancybox/jquery.fancybox.min.css","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.247Z","timestamp":1789325397247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/plugins/jquery-fancybox/jquery.fancybox.min.css HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 10 Feb 2020 15:24:02 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=sp44TVE9lCqJwoIDs9m_lGGgpgpjzxhzNbARRnc0NGM-1789325397.2774184-1.0.1.1-mIH6z3nwUZukZEIkwCRMEF6tAV6dkPUg34SJOch0MwSPGeYgkIxX1ALjsTVbEG0fZ_BA9cmnNgW_oEWIWma.kv.ODMeoUT4lO6RZbogM8ZkEk7Kdfp3z9OIVivdcZkXf; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=2U.r_LZA3cPLlNDEHBOkfLoEu.J.JW174t.n7qeC7jY-1789325397.2774184-1.0.1.1-Q1H_oNIWsk7cjBh4HhgX6Mq.4Ma2s4Fe0oy0AMZmxyQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"5cd98c1f26e0d51:0\"\r\ncontent-encoding: gzip\r\ncf-ray: a3a955b4fd11a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"sp44TVE9lCqJwoIDs9m_lGGgpgpjzxhzNbARRnc0NGM-1789325397.2774184-1.0.1.1-mIH6z3nwUZukZEIkwCRMEF6tAV6dkPUg34SJOch0MwSPGeYgkIxX1ALjsTVbEG0fZ_BA9cmnNgW_oEWIWma.kv.ODMeoUT4lO6RZbogM8ZkEk7Kdfp3z9OIVivdcZkXf","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=sp44TVE9lCqJwoIDs9m_lGGgpgpjzxhzNbARRnc0NGM-1789325397.2774184-1.0.1.1-mIH6z3nwUZukZEIkwCRMEF6tAV6dkPUg34SJOch0MwSPGeYgkIxX1ALjsTVbEG0fZ_BA9cmnNgW_oEWIWma.kv.ODMeoUT4lO6RZbogM8ZkEk7Kdfp3z9OIVivdcZkXf; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"2U.r_LZA3cPLlNDEHBOkfLoEu.J.JW174t.n7qeC7jY-1789325397.2774184-1.0.1.1-Q1H_oNIWsk7cjBh4HhgX6Mq.4Ma2s4Fe0oy0AMZmxyQ","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=2U.r_LZA3cPLlNDEHBOkfLoEu.J.JW174t.n7qeC7jY-1789325397.2774184-1.0.1.1-Q1H_oNIWsk7cjBh4HhgX6Mq.4Ma2s4Fe0oy0AMZmxyQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65055,"size_decoded":41721,"mime_type":"text/css","magic":"ASCII text, with very long lines (65052), with no line terminators","md5":"769e7345f4333cc0513fb665e357c40f","sha1":"9235c320e1815c81f5b7ac7618caafc05ee9b449","sha256":"929077a45497d5ebdc382c45c5f839e0448c8aa3892e804ebb1ebff4a13d6c54","sha512":"a7459c892d2fc85ff61b8df7426c8941effb54f6bc9b2533bc23791f0b37cc2f5dfaef92aa8f85829eec213380b0240651966538fca4e870013316c07e603a46","ssdeep":"1536:fO3A2IY+rSaIfeandvFHlI/3xFIyTCbL5Yu7IGwzHIjYZl7m0UC1/3Zc:yAcVxJ8x8Hauo1ahCk","tlshash":"8e53cf3f2f32321a5177cd14da2f5028ed75540bb11526ff946c7a228ad5bc028eb6dc","first_seen":"2025-06-04T15:33:52.715452Z","last_seen":"2026-09-22T01:20:12.241929Z","times_seen":185,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":192,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/images/header/logo_natro.com.png","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.261Z","timestamp":1789325397261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/images/header/logo_natro.com.png HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2734\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Tue, 24 Jan 2017 13:44:38 GMT\r\naccept-ranges: bytes\r\netag: \"0a76014876d21:0\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=8m7fnqdWUxTStQoCxJQ3p0ZRihHd63o0H0DdNpS08dg-1789325397.2777305-1.0.1.1-e7dMV_WLuGyHzTeuK86fjTuxAzPUT_YtHhWIAR_7ZV4sWyZluT2dnEl8sO46QaQXUkd5RWvJwyd8U5hTz_Ek.ZONnk.9y0yDKv2hyCs.qmwkYQxCg8ioIwUf8emwX3IC; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=Ef0t3hBAa6GVHxk1y6KZiAZl5QsOONplcV2hR2QciWQ-1789325397.2777305-1.0.1.1-TMBh9BAro9By.gTyUOzSPB05Z3yhh_nTQfuXGGxHf5c; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a3a955b4fd16a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"8m7fnqdWUxTStQoCxJQ3p0ZRihHd63o0H0DdNpS08dg-1789325397.2777305-1.0.1.1-e7dMV_WLuGyHzTeuK86fjTuxAzPUT_YtHhWIAR_7ZV4sWyZluT2dnEl8sO46QaQXUkd5RWvJwyd8U5hTz_Ek.ZONnk.9y0yDKv2hyCs.qmwkYQxCg8ioIwUf8emwX3IC","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=8m7fnqdWUxTStQoCxJQ3p0ZRihHd63o0H0DdNpS08dg-1789325397.2777305-1.0.1.1-e7dMV_WLuGyHzTeuK86fjTuxAzPUT_YtHhWIAR_7ZV4sWyZluT2dnEl8sO46QaQXUkd5RWvJwyd8U5hTz_Ek.ZONnk.9y0yDKv2hyCs.qmwkYQxCg8ioIwUf8emwX3IC; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"Ef0t3hBAa6GVHxk1y6KZiAZl5QsOONplcV2hR2QciWQ-1789325397.2777305-1.0.1.1-TMBh9BAro9By.gTyUOzSPB05Z3yhh_nTQfuXGGxHf5c","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=Ef0t3hBAa6GVHxk1y6KZiAZl5QsOONplcV2hR2QciWQ-1789325397.2777305-1.0.1.1-TMBh9BAro9By.gTyUOzSPB05Z3yhh_nTQfuXGGxHf5c; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2734,"size_decoded":3995,"mime_type":"image/png","magic":"PNG image data, 185 x 40, 8-bit/color RGBA, non-interlaced","md5":"b679ca68fc5fb9af27b2dc647fcec133","sha1":"149a57649c13b04293d87630f3c8a662a2d376b5","sha256":"49339d2dfb3d62104a8863b56e31cb5d8dbea54185e189b9ed031697712265d5","sha512":"509a650376edf52dfa5c7ba4a879bcc6f432d80d0c44b369b5ecce5e4133fe72c5ca4ee164546b43e2c1da85717ee04f72e0acd4800f0a411661aa32fbc42d0b","ssdeep":"","tlshash":"42514cd53e6d2679fac0748ed16b8418b8ee2313876757cfc10408c75b29e99caea4d4","first_seen":"2023-05-15T01:21:16Z","last_seen":"2026-09-22T01:20:12.235791Z","times_seen":198,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/css/fonts/Roboto-Regular.woff2","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.697Z","timestamp":1789325397697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/css/fonts/Roboto-Regular.woff2 HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://emsayapidekor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.natro.com/ResourceFiles/v1/bundle/css/bundle_header1.css?ver=99fa2324-0b89-5394-4362-019569131911\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 21076\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 27 Jan 2017 12:23:52 GMT\r\naccept-ranges: bytes\r\netag: \"0fc2c389878d21:0\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=.tYvPXfWo9ypeBqIWprAB4XhGiP26g482PijR8_HEkQ-1789325397.6985734-1.0.1.1-ZOIdfruY17lsX1iQSetHVdafWN1dEIG0lhVNL24A_zTbv_EeF2VJQXHlNUiIZD3_sRdHylrHiVzCmjHFi8rzbPJsIwugANksgnnOLVfTbGktlqahralDMMhY3L.9aMQH; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=GVsbnghYvVw_T8pE43b.amDP9YDRC67rwbladPj3N5E-1789325397.6985734-1.0.1.1-lUMKv8Z1KRPrLxEVTDXY9ixH.0o24ziiav_RdfSXL6Y; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a3a955b79eeba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":".tYvPXfWo9ypeBqIWprAB4XhGiP26g482PijR8_HEkQ-1789325397.6985734-1.0.1.1-ZOIdfruY17lsX1iQSetHVdafWN1dEIG0lhVNL24A_zTbv_EeF2VJQXHlNUiIZD3_sRdHylrHiVzCmjHFi8rzbPJsIwugANksgnnOLVfTbGktlqahralDMMhY3L.9aMQH","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=.tYvPXfWo9ypeBqIWprAB4XhGiP26g482PijR8_HEkQ-1789325397.6985734-1.0.1.1-ZOIdfruY17lsX1iQSetHVdafWN1dEIG0lhVNL24A_zTbv_EeF2VJQXHlNUiIZD3_sRdHylrHiVzCmjHFi8rzbPJsIwugANksgnnOLVfTbGktlqahralDMMhY3L.9aMQH; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"GVsbnghYvVw_T8pE43b.amDP9YDRC67rwbladPj3N5E-1789325397.6985734-1.0.1.1-lUMKv8Z1KRPrLxEVTDXY9ixH.0o24ziiav_RdfSXL6Y","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=GVsbnghYvVw_T8pE43b.amDP9YDRC67rwbladPj3N5E-1789325397.6985734-1.0.1.1-lUMKv8Z1KRPrLxEVTDXY9ixH.0o24ziiav_RdfSXL6Y; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21076,"size_decoded":22355,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21076, version 2.0","md5":"9723add759ca860091c4960e567bd1fa","sha1":"4205abd79bc0d48a846b267000d47244aa3c7b12","sha256":"295cb97c01dd59dfbcc57e98444ff5e28b75308faf3d20c161ec82ea57d1ec28","sha512":"1426aae55459d79edeaaf4fe08e891fbe0df394c85d49812c1822dc6c0fad1bc22e57371332312c23fbdcc40042fb0e1dcc2bc258563cd7e54ef0a578001b989","ssdeep":"384:RBbHwi/knGqYpX0hymjNt5PKr1dmOTmgtL3G6QbqUthD8m0PG2Umij2:X1/kGqYpe5RtAr1dXTmgtDGRGJPG/j2","tlshash":"b192e1f4b25f9ebec71929ec391077a7aac29d2048188067903443d7d49ffb18709adb","first_seen":"2023-04-11T18:56:18Z","last_seen":"2026-09-22T01:20:12.24133Z","times_seen":1223,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-1064986870","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.255Z","timestamp":1789325397255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-1064986870 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\nexpires: Sun, 13 Sep 2026 18:49:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163266\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478573,"size_decoded":163870,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"fd2e8ded34c49ee1c10d698e22a80cad","sha1":"19410fe88aa6275e6a818d663508ef3d1fa056e8","sha256":"59f8462d1d81a34232e755dffc604d443e94f8f3ca74622e30ba9bb57e62e8a6","sha512":"8a42ded0042c5e7def03f394e79781b467dd61a301ff672066a07867af7d370bfe51448538783de93630f335751a3325bbc199f50ab46ee0f3ca7781ab4e788e","ssdeep":"6144:lcif1L6SbQjmgyyE3RdJl580ucTPbNELR3/j/xPS33ON3Z:lcsq+y6Pkxw3Op","tlshash":"9aa42acd73d674229392f174903f018ba67a39a2b48cc899f18adce42d3459a9177f7c","first_seen":"2026-09-13T18:50:41.252401Z","last_seen":"2026-09-13T18:50:41.252401Z","times_seen":1,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":46,"receive":68,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/css/fonts/Roboto-Bold.woff2","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.695Z","timestamp":1789325397695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/css/fonts/Roboto-Bold.woff2 HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://emsayapidekor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.natro.com/ResourceFiles/v1/bundle/css/bundle_header1.css?ver=99fa2324-0b89-5394-4362-019569131911\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 21128\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 27 Jan 2017 12:24:10 GMT\r\naccept-ranges: bytes\r\netag: \"091e7429878d21:0\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=p0v8pInWZKCnVd9tKRkrc7BO9ugLnrRY_7ThclbEKB0-1789325397.6973574-1.0.1.1-xvjpTdOADFTH6xXJcF1.vAG8QIiM.WCprYqQcI1Qyn4QnUfSEudR5TSqJ.dzBYBxF5Tl_iYhrlZH0hgCdr5dPC7J6JeFHuIryEBDFQIed2f1kPrrLyIQX_QKncHso5cF; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=25GNRNs2Vu_ga1ojhnKfFOhZqtqJgP.oF7WqrLNaSAk-1789325397.6973574-1.0.1.1-xfl1igdLiey0TOuKzFtcOwLaS3EQQS72RO9q8tIuS28; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a3a955b79ee5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"p0v8pInWZKCnVd9tKRkrc7BO9ugLnrRY_7ThclbEKB0-1789325397.6973574-1.0.1.1-xvjpTdOADFTH6xXJcF1.vAG8QIiM.WCprYqQcI1Qyn4QnUfSEudR5TSqJ.dzBYBxF5Tl_iYhrlZH0hgCdr5dPC7J6JeFHuIryEBDFQIed2f1kPrrLyIQX_QKncHso5cF","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=p0v8pInWZKCnVd9tKRkrc7BO9ugLnrRY_7ThclbEKB0-1789325397.6973574-1.0.1.1-xvjpTdOADFTH6xXJcF1.vAG8QIiM.WCprYqQcI1Qyn4QnUfSEudR5TSqJ.dzBYBxF5Tl_iYhrlZH0hgCdr5dPC7J6JeFHuIryEBDFQIed2f1kPrrLyIQX_QKncHso5cF; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"25GNRNs2Vu_ga1ojhnKfFOhZqtqJgP.oF7WqrLNaSAk-1789325397.6973574-1.0.1.1-xfl1igdLiey0TOuKzFtcOwLaS3EQQS72RO9q8tIuS28","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=25GNRNs2Vu_ga1ojhnKfFOhZqtqJgP.oF7WqrLNaSAk-1789325397.6973574-1.0.1.1-xfl1igdLiey0TOuKzFtcOwLaS3EQQS72RO9q8tIuS28; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21128,"size_decoded":22407,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21128, version 2.0","md5":"ee2d38a5b6c3b01a480f7034f88a9877","sha1":"5f27a71a6b2e77115b4c454be3898bbdbb69f4e3","sha256":"d09d61c18d173cbb7aa6b2e6e72cfc28efc572206ed82b42c8e1aa2655b98912","sha512":"2aed0e074a29e26cacf9f214c15aa55204bd3d8f5acfb4e47c9cad818c7ea4ec1bdcd90fd25957d1f870c273495fa69fb828af208fb3742c32577869d05c66f1","ssdeep":"384:VpfNEB9hgZSXQAubttNLwC+7LQKXP9UaUiu1Sf:KKZSXTgL+7L1PbUd1s","tlshash":"8b92f15f6126328772a78df98bbb0455054ee7f7a11b92c1a7b2e7ed03c81644314d34","first_seen":"2023-04-15T13:57:38Z","last_seen":"2026-09-22T01:20:12.238717Z","times_seen":1218,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"emsayapidekor.com/favicon.ico","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":80,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.846Z","timestamp":1789325397846,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: emsayapidekor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 13 Sep 2026 18:49:57 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 5430\r\nLast-Modified: Thu, 13 Oct 2022 18:04:50 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1d8df2e4960d836\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":5644,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"9200225b96881264e6481c77d69c622c","sha1":"27608d84e28f926b740038252240f715eeb9d2bd","sha256":"26dc5ff4bfb9213291735808465e156d4a4691135f3815e3613761243e1f69c3","sha512":"b236b79924c705dca8b60fe07c886b3af2df0bcc13be6b915063fcdf691775a941de3eee5b59068508b55a7a9f5ec07d19792946d9f04b8b0cb95cb73ee10236","ssdeep":"96:cr+NYnzNJKil6fxxRJxfCoIfCOmcdCRfbNgFsLT+joiM4S:GnKEKxxLI0bcslyFsedMx","tlshash":"7cb171d264010dd0cc66faf83a2ead500656bde9e0a5960934ebb2661bb3f138c73917","first_seen":"2023-04-20T05:48:24Z","last_seen":"2026-09-22T11:40:13.995009Z","times_seen":5603,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"emsayapidekor.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"85.159.66.62","port":80,"asn":34619,"as":"Cizgi Telekomunikasyon Anonim Sirketi","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T18:49:56.720Z","timestamp":1789325396720,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: emsayapidekor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 13 Sep 2026 18:49:57 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nX-Rate-Limit-Limit: 5s\r\nX-Rate-Limit-Remaining: 3\r\nX-Rate-Limit-Reset: 2026-09-13T18:50:01.6737697Z\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":9430,"size_decoded":9670,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1b3bc3b9956dc4bc280a267ad28291d4","sha1":"52030173d85e32a6558cf5d96651bd55e52c9759","sha256":"3180802d4afab22553e74a87e4455a98e98625c43cdfbfee0928a9646e1f1902","sha512":"7cedc3eeb120f06e7be776e71514ecf0350b0e508ee9673b4d4a33d463055ed39dbe4def14b54bfbd341856ad120773628a17cdc6d04a0fbe2c894bf13f21831","ssdeep":"96:muPlQ0ZRzPPlQ058yy4PlQ0N6PlQ0M8MBQQ/8E5iPUrvLGJr0bMw0ziUOUtnTjAB:mYQwQ08KQbQR89QRJeJgbctJVTc6y","tlshash":"43128867508648252372c29679b3b80ceb068147c214e4e5fadc53bf6ff2fe18093a5e","first_seen":"2026-09-13T18:50:41.25498Z","last_seen":"2026-09-13T18:50:41.25498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":3,"connect":68,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"emsayapidekor.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/plugins/bootstrap-3.3.7/css/bootstrap.min.css","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.245Z","timestamp":1789325397245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/plugins/bootstrap-3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 25 May 2021 10:37:12 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=1r1VMqthkXNvo0dfFbjVyOQXRc9dqEZuZ9olrkLZodY-1789325397.2765386-1.0.1.1-XqHaUtkvvyOvlCEp59l52NB280b_sZi7cNHws1mCnNK_rM2gEo5XLkD2Jco6kDL.oytk_FoJ9DAqBQUSLjbWkkKIxT94iytKzNZc1FvbOrTlG3yTgzP6KK9j0g0Cw58F; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=8IUTz5j4nMiXq4yD6qz59jD9.jblKqDlOKjCxltt9Vk-1789325397.2765386-1.0.1.1-gEhmHm9Bw3zEZN2Hg6hM61Dp2pY1grwpI2Os0.dZrDY; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"af8df4eb5151d71:0\"\r\ncontent-encoding: gzip\r\ncf-ray: a3a955b4fd0aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"1r1VMqthkXNvo0dfFbjVyOQXRc9dqEZuZ9olrkLZodY-1789325397.2765386-1.0.1.1-XqHaUtkvvyOvlCEp59l52NB280b_sZi7cNHws1mCnNK_rM2gEo5XLkD2Jco6kDL.oytk_FoJ9DAqBQUSLjbWkkKIxT94iytKzNZc1FvbOrTlG3yTgzP6KK9j0g0Cw58F","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=1r1VMqthkXNvo0dfFbjVyOQXRc9dqEZuZ9olrkLZodY-1789325397.2765386-1.0.1.1-XqHaUtkvvyOvlCEp59l52NB280b_sZi7cNHws1mCnNK_rM2gEo5XLkD2Jco6kDL.oytk_FoJ9DAqBQUSLjbWkkKIxT94iytKzNZc1FvbOrTlG3yTgzP6KK9j0g0Cw58F; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"8IUTz5j4nMiXq4yD6qz59jD9.jblKqDlOKjCxltt9Vk-1789325397.2765386-1.0.1.1-gEhmHm9Bw3zEZN2Hg6hM61Dp2pY1grwpI2Os0.dZrDY","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=8IUTz5j4nMiXq4yD6qz59jD9.jblKqDlOKjCxltt9Vk-1789325397.2765386-1.0.1.1-gEhmHm9Bw3zEZN2Hg6hM61Dp2pY1grwpI2Os0.dZrDY; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121224,"size_decoded":20783,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"13f8c51afe67c760b0d89d6eb498f9ac","sha1":"f81ee26c0ef91e8ad01ef064732ac0c4bfb80281","sha256":"0ebeff2dd2d1036cfc4675dec27ba5f2e917839330473b45bbb766bb1cbe6320","sha512":"9e0c871d269009b476d5b78b5781cccebfbdcbabe064d14d09ad2b6b77ae5c8ba1c0524052020da4406452c86395b7b0c89768decdb946ec902c1b79ea55e6d5","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FL:tw/a1fIuiHlq5mN8lDbNmPbQ","tlshash":"33c3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca16b3f1a","first_seen":"2025-06-04T15:33:52.724696Z","last_seen":"2026-09-22T01:20:12.239807Z","times_seen":185,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":14,"connect":14,"send":0,"wait":193,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/images/expired-domain/700x150.png","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.263Z","timestamp":1789325397263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/images/expired-domain/700x150.png HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 54217\r\nserver: cloudflare\r\npriority: u=5,i\r\nlast-modified: Thu, 25 Apr 2024 13:34:55 GMT\r\naccept-ranges: bytes\r\netag: \"36434c5c1597da1:0\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=nIt5WOHAMT6bVEUYvWlJUFKhrDs3yOGnNu_YAaItbnM-1789325397.2781413-1.0.1.1-TCUNfgSeJA5wKKw7GQbHERHv6xY81JZ9N4Rdi0.n3_125uvA2jC42yueGgcuEUa8VBD0d1UfliVRfd9Jyq2FO80sb_56aPWfdAMliBs.iZbiYcnfrxrl8kvHZEKrRDG1; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=Gy8D1ZNNKojHo_XOyeGk55n6iSZe2g7S.qyUAypJhgo-1789325397.2781413-1.0.1.1-BtqZ42y7uDGMTFar8kI4BOu3u_oF1FpuI_i8aWHZVro; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a3a955b4fd17a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"nIt5WOHAMT6bVEUYvWlJUFKhrDs3yOGnNu_YAaItbnM-1789325397.2781413-1.0.1.1-TCUNfgSeJA5wKKw7GQbHERHv6xY81JZ9N4Rdi0.n3_125uvA2jC42yueGgcuEUa8VBD0d1UfliVRfd9Jyq2FO80sb_56aPWfdAMliBs.iZbiYcnfrxrl8kvHZEKrRDG1","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=nIt5WOHAMT6bVEUYvWlJUFKhrDs3yOGnNu_YAaItbnM-1789325397.2781413-1.0.1.1-TCUNfgSeJA5wKKw7GQbHERHv6xY81JZ9N4Rdi0.n3_125uvA2jC42yueGgcuEUa8VBD0d1UfliVRfd9Jyq2FO80sb_56aPWfdAMliBs.iZbiYcnfrxrl8kvHZEKrRDG1; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"Gy8D1ZNNKojHo_XOyeGk55n6iSZe2g7S.qyUAypJhgo-1789325397.2781413-1.0.1.1-BtqZ42y7uDGMTFar8kI4BOu3u_oF1FpuI_i8aWHZVro","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=Gy8D1ZNNKojHo_XOyeGk55n6iSZe2g7S.qyUAypJhgo-1789325397.2781413-1.0.1.1-BtqZ42y7uDGMTFar8kI4BOu3u_oF1FpuI_i8aWHZVro; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54217,"size_decoded":55481,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 770x165, components 3","md5":"d6e9c7d47097d8c671ec6876c48bd60f","sha1":"ac07a364b57b86370428fab3a9434afd14786ad9","sha256":"5f92f594b21ca88b9c24fa8aba1dc5dd583fe94dc12b823bc05ddf8efaf06713","sha512":"105f07cf9332cd8d1a0b513dfbf55c0583945db84981db541f909d2b5f91482f6cd109b7c9e80f50664d80eeffe69f091169c03a03079792c9322e06739361e8","ssdeep":"1536:ZnUqF1gMgP82mLOpLqiQqyq5CWGXP4DD64q1kBq:iqFCXLdpMqZ4S6pR","tlshash":"a5330238e2e31d37d1f4a431f376c7929b31889b87a3c3894565a4c47bd038a582a3a3","first_seen":"2024-07-02T23:45:33Z","last_seen":"2026-09-22T01:20:12.232118Z","times_seen":191,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":193,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/css/fonts/Roboto-Light.woff2","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.681Z","timestamp":1789325397681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/css/fonts/Roboto-Light.woff2 HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://emsayapidekor.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.natro.com/ResourceFiles/v1/bundle/css/bundle_header1.css?ver=99fa2324-0b89-5394-4362-019569131911\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 21008\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 27 Jan 2017 12:23:38 GMT\r\naccept-ranges: bytes\r\netag: \"0c1d42f9878d21:0\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=RBndomvK24t0.F27hDYhhTo2BeEm68x4cxNK4egwvo8-1789325397.683597-1.0.1.1-rNmKDMxoCMSzrTt.fhtew0aV1bxYVi3QoJVUFl4qV1dLO8aBfuKxEZC6VPVWkQGmhGEncvxnv6QPen6.kJ0ujdo9r8KzzdW2mUG1d0bMX2QY1bldB.c2fdn9OvOqC4o8; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=fVK2_tutNyixgxayzR1QwTHq4KIihMP7zTE_n7dmZ20-1789325397.683597-1.0.1.1-ZZtsksLOb2aMcwTM_P67bgrQUgiOEhqbZv_jbNKLQjk; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a3a955b78e8aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"RBndomvK24t0.F27hDYhhTo2BeEm68x4cxNK4egwvo8-1789325397.683597-1.0.1.1-rNmKDMxoCMSzrTt.fhtew0aV1bxYVi3QoJVUFl4qV1dLO8aBfuKxEZC6VPVWkQGmhGEncvxnv6QPen6.kJ0ujdo9r8KzzdW2mUG1d0bMX2QY1bldB.c2fdn9OvOqC4o8","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=RBndomvK24t0.F27hDYhhTo2BeEm68x4cxNK4egwvo8-1789325397.683597-1.0.1.1-rNmKDMxoCMSzrTt.fhtew0aV1bxYVi3QoJVUFl4qV1dLO8aBfuKxEZC6VPVWkQGmhGEncvxnv6QPen6.kJ0ujdo9r8KzzdW2mUG1d0bMX2QY1bldB.c2fdn9OvOqC4o8; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"fVK2_tutNyixgxayzR1QwTHq4KIihMP7zTE_n7dmZ20-1789325397.683597-1.0.1.1-ZZtsksLOb2aMcwTM_P67bgrQUgiOEhqbZv_jbNKLQjk","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=fVK2_tutNyixgxayzR1QwTHq4KIihMP7zTE_n7dmZ20-1789325397.683597-1.0.1.1-ZZtsksLOb2aMcwTM_P67bgrQUgiOEhqbZv_jbNKLQjk; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21008,"size_decoded":22285,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21008, version 2.0","md5":"07b858873616050922721306d9e8e873","sha1":"5c3c9a7245159be857daaec5882124a29a64c45b","sha256":"63a115e647cca99dcf0887aac0e1f0f7e8d765531acb8f88fc5a21442860f995","sha512":"948d83d54b4057632cafe8e1ad9d096e4c82ed3e96e3d311cdb347c3fee5c192735313c22253c561f8191d851175474c755aaddcf94ca15b0b17a0a2ad87826c","ssdeep":"384:5qveoBaYp0tTfKYm5isDGA0oxhdPTkP9ME4HvAoq4g2/UhoelgmqV/Fj:cve64jt3wdYilHIoNz/6Edj","tlshash":"0c92d161764fc900ec1ecf66e247820d6a0c029287e881c5edeb16c287c45615de9baf","first_seen":"2023-04-15T13:57:38Z","last_seen":"2026-09-22T01:20:12.233215Z","times_seen":1216,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"emsayapidekor.com/","fqdn":"emsayapidekor.com","domain":"emsayapidekor.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T18:49:54.069Z","timestamp":1789325394069,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: emsayapidekor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T20:48:35.301897Z","times_seen":18605994,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"emsayapidekor.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"emsayapidekor.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/css/font-awesome.min.css","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.252Z","timestamp":1789325397252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/css/font-awesome.min.css HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 25 May 2021 10:33:40 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=jYaiIRKiU..O_.NGmQFAftwlMQQrXyRjoO6wO3VdnWg-1789325397.2769656-1.0.1.1-mCB78HAnReMguEl6q5roKSto134fKwAbS_R1pSx4EBpn5GDv4YWHHjyNgrc1L87VW2vBW4K.mp5gjxUyKGFvgyuJlF2qqAhxBPoLb.J5.R6hi9yg_QZt9Q7rZba5.Yib; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=ygUSrKcS9G3M6wXrPdT01LGfG16vSkH5fHUVQqVmIe4-1789325397.2769656-1.0.1.1-O3jm0QBirwdjq9az21ssUoduVRi4SfxT2g9DejZmIHM; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"363fc66d5151d71:0\"\r\ncontent-encoding: gzip\r\ncf-ray: a3a955b4fd0fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"jYaiIRKiU..O_.NGmQFAftwlMQQrXyRjoO6wO3VdnWg-1789325397.2769656-1.0.1.1-mCB78HAnReMguEl6q5roKSto134fKwAbS_R1pSx4EBpn5GDv4YWHHjyNgrc1L87VW2vBW4K.mp5gjxUyKGFvgyuJlF2qqAhxBPoLb.J5.R6hi9yg_QZt9Q7rZba5.Yib","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=jYaiIRKiU..O_.NGmQFAftwlMQQrXyRjoO6wO3VdnWg-1789325397.2769656-1.0.1.1-mCB78HAnReMguEl6q5roKSto134fKwAbS_R1pSx4EBpn5GDv4YWHHjyNgrc1L87VW2vBW4K.mp5gjxUyKGFvgyuJlF2qqAhxBPoLb.J5.R6hi9yg_QZt9Q7rZba5.Yib; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"ygUSrKcS9G3M6wXrPdT01LGfG16vSkH5fHUVQqVmIe4-1789325397.2769656-1.0.1.1-O3jm0QBirwdjq9az21ssUoduVRi4SfxT2g9DejZmIHM","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=ygUSrKcS9G3M6wXrPdT01LGfG16vSkH5fHUVQqVmIe4-1789325397.2769656-1.0.1.1-O3jm0QBirwdjq9az21ssUoduVRi4SfxT2g9DejZmIHM; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31023,"size_decoded":8151,"mime_type":"text/css","magic":"ASCII text, with very long lines (30856), with CRLF, LF line terminators","md5":"404429bb0e4f93cec5b14e3252e7dc3c","sha1":"857da07ef591a1ae5ea42c03a384eef2ce16349a","sha256":"4ef45603673a97569bce9393d60f0e28e7fc4ceac5c14290a0b765d9b5d8d4b4","sha512":"1acdf42febc33c22d1525948a22b7265353aa21904f0ffe704538f38b9c966fa391aa3d91c3cec9d3a6759d2b34fae3d45b80c44717e086286e0c36107e44f2b","ssdeep":"384:qHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8Z:qwlr+Klk3Yi+fwYUf2l8yQ/e9vC","tlshash":"fed241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2025-04-16T05:14:06.332623Z","last_seen":"2026-09-22T01:20:12.242463Z","times_seen":1172,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":198,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.natro.com/ResourceFiles/v1/bundle/css/bundle_header1.css?ver=99fa2324-0b89-5394-4362-019569131911","fqdn":"www.natro.com","domain":"natro.com","tld":"com"},"ip":{"addr":"104.18.23.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.253Z","timestamp":1789325397253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.natro.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Mon, 04 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:AE:2C:52:62:9E:15:33:97:9A:0A:E8:0C:9C:5F:7F:7A:DE:73:3E","sha256":"3F:4B:35:2E:9E:D1:00:F6:BD:5D:5E:31:FF:92:FE:EF:E2:7A:70:87:9E:23:49:8C:BE:80:70:DC:F2:7F:6E:78"}}},"request":{"raw":"GET /ResourceFiles/v1/bundle/css/bundle_header1.css?ver=99fa2324-0b89-5394-4362-019569131911 HTTP/1.1\r\nHost: www.natro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 16 Feb 2022 09:23:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000;\r\nfeature-policy: camera 'self'; geolocation 'self'; microphone 'self'; payment 'none'; usb 'none';\r\nexpect-ct: max-age=30,report-uri=\"https://www.natro.com/report-collect/ct/data/\"\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=3hDUgYcJgjTp4EiTiT915W7IEc_GUYjxHN1b_kIiei0-1789325397.2767324-1.0.1.1-v9sN_SaONGsT0_pQ8hNmdbbfAhDNPN.Z8H0budRxcAp_0Js8tjsfwNy6KPJ7d0rnTXT6mXiMJDG92Np5jwYmjvrQVGjTcU2qwntOFXMTD.NX_5D8QE2RHHAjqC9_Ccpe; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT\n_cfuvid=QkiNiNEWEMjJTdGDwnNmj0fvY9RUK6jO7WmfezcNgJ0-1789325397.2767324-1.0.1.1-dMzVBAuAjK0J_znoOYmtwzW1NrwPMT7lpR.v5_eNM2A; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"78e8edde1623d81:0\"\r\ncontent-encoding: gzip\r\ncf-ray: a3a955b4fd0da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"3hDUgYcJgjTp4EiTiT915W7IEc_GUYjxHN1b_kIiei0-1789325397.2767324-1.0.1.1-v9sN_SaONGsT0_pQ8hNmdbbfAhDNPN.Z8H0budRxcAp_0Js8tjsfwNy6KPJ7d0rnTXT6mXiMJDG92Np5jwYmjvrQVGjTcU2qwntOFXMTD.NX_5D8QE2RHHAjqC9_Ccpe","quoted":false,"path":"/","domain":"natro.com","expires":"2026-09-13T19:19:57Z","raw_expires":"Sun, 13 Sep 2026 19:19:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=3hDUgYcJgjTp4EiTiT915W7IEc_GUYjxHN1b_kIiei0-1789325397.2767324-1.0.1.1-v9sN_SaONGsT0_pQ8hNmdbbfAhDNPN.Z8H0budRxcAp_0Js8tjsfwNy6KPJ7d0rnTXT6mXiMJDG92Np5jwYmjvrQVGjTcU2qwntOFXMTD.NX_5D8QE2RHHAjqC9_Ccpe; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com; Expires=Sun, 13 Sep 2026 19:19:57 GMT"},{"name":"_cfuvid","value":"QkiNiNEWEMjJTdGDwnNmj0fvY9RUK6jO7WmfezcNgJ0-1789325397.2767324-1.0.1.1-dMzVBAuAjK0J_znoOYmtwzW1NrwPMT7lpR.v5_eNM2A","quoted":false,"path":"/","domain":"natro.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=QkiNiNEWEMjJTdGDwnNmj0fvY9RUK6jO7WmfezcNgJ0-1789325397.2767324-1.0.1.1-dMzVBAuAjK0J_znoOYmtwzW1NrwPMT7lpR.v5_eNM2A; HttpOnly; SameSite=None; Secure; Path=/; Domain=natro.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195089,"size_decoded":34947,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1189b2c51f530439d3bc621fb148d0a9","sha1":"6228befa00c0faf71a585bddb7639d43c7ea05ab","sha256":"1990692e5cc2706b8293a46ecbe9392160d8ce06a8e605471f79ec6545d11971","sha512":"1350826bed41e3da5aac3beac3758592ed5a376c84109e91543e12c6ad10ca23f53d2c37bc5029b67cc2149cc413b05c872fcd936088b52fa175ae3a76833ef4","ssdeep":"1536:6vpqBlqXAQ/mbCmnEA2XUF2dolrniSUf2l7f9vdGu6a5qsq3YkUdyYVXBWGbC6aA:+tAOdoFiS22l7pX5qsFkXGbC1rT2","tlshash":"a2149572e59820d9b377c51ffbc07a983238f226d6130fe9f156745ccac129912a2f59","first_seen":"2024-03-03T02:01:12Z","last_seen":"2026-09-22T01:20:12.231435Z","times_seen":1178,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":197,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P4KC6PC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://emsayapidekor.com/","date":"2026-09-13T18:49:57.683Z","timestamp":1789325397683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-P4KC6PC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://emsayapidekor.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 13 Sep 2026 18:49:57 GMT\r\nexpires: Sun, 13 Sep 2026 18:49:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 13 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 180908\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":581794,"size_decoded":181538,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (47652)","md5":"a4b780ab15f9097be1fff91f00fff8e9","sha1":"e6bebba28af257a2e6a2f6457f56402bbc55552f","sha256":"c650b9aef62c2c79862273f74fedcae19f8b36065c90cd9f81bd73e4054c1103","sha512":"82661593557e1ac25edb5f4d4401d5f6b60c21fa9d48f6cc0bceb8dc0414a46d7f6815d018e7a7003f458359087a1f370bd4b475cd5a983023588ec0990a5480","ssdeep":"6144:I42la50f1L6SwQGmgyyE3RdJl580ucTPbNELR3/jcCZS3yN0tmZ:L2laEh5y6PFCKqP","tlshash":"6ec419ceb3c67436c3a2b574903f018b663e29a2b44cd855f18adcd42e3456a6163f7e","first_seen":"2026-09-13T18:50:41.259601Z","last_seen":"2026-09-13T18:50:41.259601Z","times_seen":1,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}