{"report_id":"b854ff69-aa3b-4185-a648-ea63c4f571d2","version":6,"status":"done","tags":[],"date":"2025-11-18T20:37:03Z","url":{"schema":"http","addr":"niceoffersz.com/","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"ip":{"addr":"101.42.171.214","port":0,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"niceoffersz.com/","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"title":"Niceoffer - 专业IT求职培训","dom":{"size":50010,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14584)","md5":"3dae8dcc33739c99b6d66b528745bc67","sha1":"96ffde3ae1be39bdf43d74f1455016f5b2fa4259","sha256":"64f643a2fa0d786ce9b3ef7a5d448b0480be46f94b5057c3cf8165f57f97a6b2","sha512":"556b3cc9552ea0e8fc3583250c914e146806e21d366876bf9f20f76d73122de91af5eb18cf0b47b674055e80f702582e913b44c1def91ca081bb81b31efceaac","ssdeep":"768:sZ4rhnMXBT+WbQVYi9fGgts4CkBwAh+Bf7E1hUuzqwSsBCP5fJbtzGlslaekMX:M4rhMXUYshpZS4e5fJbtzGpMX","tlshash":"f223e92d26e1126f4c93c1f1e2556b2dba28d94bca2bdd5bb39d02425fc3ee24d93314","dom_hash":"domhash1bb81d5feb3c5476cce9b237d00684db","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"niceoffersz.com/","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"ip":{"addr":"101.42.171.214","port":0,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-23T20:37:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T20:36:42Z","timestamp":1763498202,"ip_dst":{"addr":"159.75.57.69","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.16","port":58272,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-18T20:36:42.077153+0000\",\"flow_id\":40780057635937,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":58272,\"dest_ip\":\"159.75.57.69\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"niceoffer-1304667505.cos.ap-guangzhou.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3092,\"start\":\"2025-11-18T20:36:41.552033+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T20:36:42Z","timestamp":1763498202,"ip_dst":{"addr":"159.75.57.35","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.16","port":45208,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-18T20:36:42.341843+0000\",\"flow_id\":949238655173004,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":45208,\"dest_ip\":\"159.75.57.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"niceoffer-1304667505.cos.ap-guangzhou.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1606,\"start\":\"2025-11-18T20:36:41.803212+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"picsum.photos","ip":{"addr":"104.26.4.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-14","domain_rank":29556,"first_seen":"2017-10-10T10:03:26Z","last_seen":"2025-11-18T03:04:23.599272Z","alert_count":0,"request_count":5,"received_data":56099,"sent_data":2202,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fastly.picsum.photos","ip":{"addr":"151.101.193.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2017-09-14","domain_rank":452388,"first_seen":"2023-01-26T01:05:02Z","last_seen":"2025-11-14T02:12:41.227391Z","alert_count":0,"request_count":5,"received_data":54815,"sent_data":2485,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"niceoffersz.com","ip":{"addr":"101.42.171.214","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":143791,"sent_data":1941,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-11-16T22:59:47.762995Z","alert_count":0,"request_count":2,"received_data":815947,"sent_data":822,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"niceoffer-1304667505.cos.ap-guangzhou.myqcloud.com","ip":{"addr":"159.75.57.69","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-04-24","domain_rank":0,"first_seen":"2025-11-18T20:37:04.388998Z","last_seen":"2025-11-18T20:37:04.388998Z","alert_count":0,"request_count":1,"received_data":112279,"sent_data":482,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T20:36:42Z","timestamp":1763498202,"ip_dst":{"addr":"159.75.57.69","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.16","port":58272,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-18T20:36:42.077153+0000\",\"flow_id\":40780057635937,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":58272,\"dest_ip\":\"159.75.57.69\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"niceoffer-1304667505.cos.ap-guangzhou.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3092,\"start\":\"2025-11-18T20:36:41.552033+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T20:36:42Z","timestamp":1763498202,"ip_dst":{"addr":"159.75.57.35","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.16","port":45208,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-11-18T20:36:42.341843+0000\",\"flow_id\":949238655173004,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":45208,\"dest_ip\":\"159.75.57.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"niceoffer-1304667505.cos.ap-guangzhou.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1606,\"start\":\"2025-11-18T20:36:41.803212+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"niceoffersz.com/","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"ip":{"addr":"101.42.171.214","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"db97c809e7d569d5d4c5ecff70563a14","sha1":"abf082fde825d60b96de67c173f7e29d864fec0f","sha256":"1b240981acedd99284cc4629d08e153d4633c11e855d02c5b716eb5e506e196b","sha512":"2763b226433bf083a5ee3792f6f3a6c2137870f4b0a9b0df7b3534f9cb831d4f242a0361a23b2f186c9903be23a1bde4f0300c1c16a3391d70501e3f2d92bd4f","ssdeep":"","tlshash":"f81127fd0db35f939523402a958e9821bfc840473d5c3c26b98c40126f9d80de5f9702","size":915,"data":"","first_seen":"2025-11-18T20:37:14.686276Z","last_seen":"2025-11-18T20:37:14.686276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niceoffersz.com/","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"ip":{"addr":"101.42.171.214","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"eaa29733112191666240b8e702d46b6b","sha1":"a440c2486c8f9b48b998e569eade2f97ff43313b","sha256":"4cc4b9e1adc5e4d1cac7706e32d6ae2b662059552f7d9dd6e202642133e8da5d","sha512":"c7945f8ee07ee253f7840291a4cdf40b9bb5135e56d636d38bc3ae38de60e19e7d863b08eef409a3d8df78ee19e6d25426fb98a00fe1633ebf25cecdb889d906","ssdeep":"","tlshash":"bb415d1661a2353704ffa5bf974be789366310476446cc053f6cca4a2f62bb2ace26d4","size":2307,"data":"","first_seen":"2025-11-18T20:37:14.68813Z","last_seen":"2025-11-18T20:37:14.68813Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-06T09:06:10.058262Z","times_seen":29000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"picsum.photos/seed/teacher4/100","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.4.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 20:45:18 GMT","end":"Sat, 31 Jan 2026 21:45:03 GMT"},"fingerprint":{"sha1":"18:5B:55:C2:2E:4C:E9:12:F6:52:2B:9D:96:08:23:3A:BB:C3:AF:E6","sha256":"E4:A0:72:49:A4:25:E6:9D:02:2D:79:3A:EA:5F:A2:AC:1A:89:8D:CC:33:7A:FB:6D:79:E8:E0:A4:C6:BF:66:B3"}}},"request":{"raw":"GET /seed/teacher4/100 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncontent-length: 0\r\nlocation: https://fastly.picsum.photos/id/778/100/100.jpg?hmac=n-Y86yw6MYyM-Ybnagk4dPTHyn5XhY2XWVW7ciIsSFA\r\nserver: cloudflare\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=841cilJuwSpRD4rYtU3ecZD87BSkdcjxRplDasdf3JM%2Bx%2FcsxR2is1UzMpdNAUYsImXrS0rcKSJNWkYChIcVU194WJhf9lUX5U9adQ%3D%3D\"}]}\r\ncf-ray: 9a0a42ed4aa535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2668,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":34,"dns":5,"connect":5,"send":0,"wait":87,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/teacher2/100","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.4.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 20:45:18 GMT","end":"Sat, 31 Jan 2026 21:45:03 GMT"},"fingerprint":{"sha1":"18:5B:55:C2:2E:4C:E9:12:F6:52:2B:9D:96:08:23:3A:BB:C3:AF:E6","sha256":"E4:A0:72:49:A4:25:E6:9D:02:2D:79:3A:EA:5F:A2:AC:1A:89:8D:CC:33:7A:FB:6D:79:E8:E0:A4:C6:BF:66:B3"}}},"request":{"raw":"GET /seed/teacher2/100 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncontent-length: 0\r\nlocation: https://fastly.picsum.photos/id/445/100/100.jpg?hmac=Yj-p3ojaj1886BldqJCa64rHufotimcplPwn2SM8uBo\r\nserver: cloudflare\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWYit2Ta5mHArqIWKPkBCxgwZmuLOV1tTskVISlVytg%2BUtfMR4R%2Foa%2Bs2eLEy69LpCZ7hMlwIANhRExDvANiEiWjvk7lPGcHwXPLCQ%3D%3D\"}]}\r\ncf-ray: 9a0a42ed3a8f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2733,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":80,"dns":31,"connect":5,"send":0,"wait":64,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/466/100/100.jpg?hmac=15Hjzs5oHgFaNN41Kurw7PjUxX-7Bkg6Macv3z2p47c","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.193.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 08:32:05 GMT","end":"Sun, 08 Feb 2026 08:32:04 GMT"},"fingerprint":{"sha1":"05:97:0A:92:BF:81:59:6E:DB:3E:90:36:41:93:B4:BE:21:97:12:7F","sha256":"3A:29:E5:21:CE:98:B8:B7:12:2C:FA:C4:35:57:AB:32:16:97:04:E0:66:0A:B8:0C:78:5D:3B:63:A7:1A:52:4E"}}},"request":{"raw":"GET /id/466/100/100.jpg?hmac=15Hjzs5oHgFaNN41Kurw7PjUxX-7Bkg6Macv3z2p47c HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"466-100x100.jpg\"\r\npicsum-id: 466\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 151640\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1763498201.332550,VS0,VE5\r\nvary: Origin\r\ncontent-length: 3529\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 100x100, components 3","md5":"2219ca5f3dd24f63b2dd96447142f3f2","sha1":"ad66f7f0783b27fbb0a4c6612e97cf73007f4b3b","sha256":"3c328b13e7dee38f2a681341b53f2076a166a7ce8492b7c692c6e8aa6edd719e","sha512":"c92d4c1d17bcc2142e108806dbc6c13c8ed6faa603bf62b2a9a30aab030774dc51ee412b7714d3cad1ec321dfbdbd6164b5df0a7c2e0faeba5554bdf6fbb02cc","ssdeep":"","tlshash":"19712db19f285938eb51017d78cb33a02621ef0aae452fbb35908a18ec7ddf149509d6","first_seen":"2025-11-18T20:37:14.662083Z","last_seen":"2025-11-18T20:37:14.662083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":86,"dns":23,"connect":29,"send":0,"wait":32,"receive":3,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/778/100/100.jpg?hmac=n-Y86yw6MYyM-Ybnagk4dPTHyn5XhY2XWVW7ciIsSFA","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.193.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 08:32:05 GMT","end":"Sun, 08 Feb 2026 08:32:04 GMT"},"fingerprint":{"sha1":"05:97:0A:92:BF:81:59:6E:DB:3E:90:36:41:93:B4:BE:21:97:12:7F","sha256":"3A:29:E5:21:CE:98:B8:B7:12:2C:FA:C4:35:57:AB:32:16:97:04:E0:66:0A:B8:0C:78:5D:3B:63:A7:1A:52:4E"}}},"request":{"raw":"GET /id/778/100/100.jpg?hmac=n-Y86yw6MYyM-Ybnagk4dPTHyn5XhY2XWVW7ciIsSFA HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"778-100x100.jpg\"\r\npicsum-id: 778\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1763498201.341645,VS0,VE39\r\nvary: Origin\r\ncontent-length: 2668\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 100x100, components 3","md5":"bf768c4bbe316593ec1533e7bafaef84","sha1":"0d2b3095d32838d8ab048e96fa776c8b03279904","sha256":"2c126488002d136ee13cd50cb2fdc81687888bbaaf33a98d93d9a26ef37ccd76","sha512":"eb54d30c0e5e3c8a83409f88b8faf0f14303a55d6ce2b7e4a2a3602888d10dc52c4769a05c44843ff717b612afe133d26bca88214f9187b8a0afcec7fa24d0b4","ssdeep":"","tlshash":"4551194727b09d68f33b017aa014331a9240ee0a27847b7724a80f376e87eb08cb95b0","first_seen":"2025-11-18T20:37:14.669678Z","last_seen":"2025-11-18T20:37:14.669678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":65,"dns":1,"connect":29,"send":0,"wait":66,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/teacher3/100","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.4.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 20:45:18 GMT","end":"Sat, 31 Jan 2026 21:45:03 GMT"},"fingerprint":{"sha1":"18:5B:55:C2:2E:4C:E9:12:F6:52:2B:9D:96:08:23:3A:BB:C3:AF:E6","sha256":"E4:A0:72:49:A4:25:E6:9D:02:2D:79:3A:EA:5F:A2:AC:1A:89:8D:CC:33:7A:FB:6D:79:E8:E0:A4:C6:BF:66:B3"}}},"request":{"raw":"GET /seed/teacher3/100 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncontent-length: 0\r\nlocation: https://fastly.picsum.photos/id/964/100/100.jpg?hmac=_id-TbaudbdfOV6_2_XIt8DpumpQJ7SdJFJ-m7Od_wU\r\nserver: cloudflare\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xs5mk6BCOVDBazTuoolc8h%2BFkrQu2xlohNxGi5Ff5FuqReTJZj7vnEqgcu%2BPnI%2BN2TPqqC5lXaD78RSYCbLaDbDphnkJqrVA3eZaOw%3D%3D\"}]}\r\ncf-ray: 9a0a42ed3a8c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2316,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":78,"dns":32,"connect":1,"send":0,"wait":94,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/office/800/600","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.4.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 20:45:18 GMT","end":"Sat, 31 Jan 2026 21:45:03 GMT"},"fingerprint":{"sha1":"18:5B:55:C2:2E:4C:E9:12:F6:52:2B:9D:96:08:23:3A:BB:C3:AF:E6","sha256":"E4:A0:72:49:A4:25:E6:9D:02:2D:79:3A:EA:5F:A2:AC:1A:89:8D:CC:33:7A:FB:6D:79:E8:E0:A4:C6:BF:66:B3"}}},"request":{"raw":"GET /seed/office/800/600 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncontent-length: 0\r\nlocation: https://fastly.picsum.photos/id/930/800/600.jpg?hmac=SzBvG2UgHyNl8iXQo-M93HpDKpH8lV2Mo6cSZ12IzM0\r\nserver: cloudflare\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NrUVI9s3dJqnWNCG9rwjlSv9JYprz6ZkLCgHHUBGSz65IZJ9uDxrGhdI9%2BTeRBHod0neQV7GyGDDfw5l4kEymoIpHwQwt4%2FC1WMsSw%3D%3D\"}]}\r\ncf-ray: 9a0a42ed2a8435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41057,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/930/800/600.jpg?hmac=SzBvG2UgHyNl8iXQo-M93HpDKpH8lV2Mo6cSZ12IzM0","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.193.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 08:32:05 GMT","end":"Sun, 08 Feb 2026 08:32:04 GMT"},"fingerprint":{"sha1":"05:97:0A:92:BF:81:59:6E:DB:3E:90:36:41:93:B4:BE:21:97:12:7F","sha256":"3A:29:E5:21:CE:98:B8:B7:12:2C:FA:C4:35:57:AB:32:16:97:04:E0:66:0A:B8:0C:78:5D:3B:63:A7:1A:52:4E"}}},"request":{"raw":"GET /id/930/800/600.jpg?hmac=SzBvG2UgHyNl8iXQo-M93HpDKpH8lV2Mo6cSZ12IzM0 HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"930-800x600.jpg\"\r\npicsum-id: 930\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1763498201.334594,VS0,VE93\r\nvary: Origin\r\ncontent-length: 41057\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":41057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 800x600, components 3","md5":"fa6523457732126f37a405553614569d","sha1":"97553d65ea563609d84cdc5126a9477720155c23","sha256":"41a8663f4a0c39f28d3f518f4cebb834952b77d061970e67edc7ae5d05b2ebbb","sha512":"15a7a9ada04c8c9a1c1ebcea4eeabd26ac8a564540b22c8f59b832f0a811bc5020ab9c2962e41c0ca482b7d4dc6f188588d4ba1a9938b39f7393a33f22f5d0cc","ssdeep":"768:gTAX/sDSOFB+YUN8ASKnEsyR6J/TtB2qN8pxC8e1AWX7jTjJI1nmSNpoqrh:dEJwNzSKnEbUN8euyTjJI1Zvh","tlshash":"c403028eea91309bf720a535a023d39b9001e9400f8c34b8e57a8e1879f6eff97d1d55","first_seen":"2025-11-18T20:37:14.670818Z","last_seen":"2025-11-18T20:37:14.670818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":99,"dns":33,"connect":31,"send":0,"wait":119,"receive":13,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/445/100/100.jpg?hmac=Yj-p3ojaj1886BldqJCa64rHufotimcplPwn2SM8uBo","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.193.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 08:32:05 GMT","end":"Sun, 08 Feb 2026 08:32:04 GMT"},"fingerprint":{"sha1":"05:97:0A:92:BF:81:59:6E:DB:3E:90:36:41:93:B4:BE:21:97:12:7F","sha256":"3A:29:E5:21:CE:98:B8:B7:12:2C:FA:C4:35:57:AB:32:16:97:04:E0:66:0A:B8:0C:78:5D:3B:63:A7:1A:52:4E"}}},"request":{"raw":"GET /id/445/100/100.jpg?hmac=Yj-p3ojaj1886BldqJCa64rHufotimcplPwn2SM8uBo HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"445-100x100.jpg\"\r\npicsum-id: 445\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1763498201.328570,VS0,VE43\r\nvary: Origin\r\ncontent-length: 2733\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2733,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 100x100, components 3","md5":"3c7b872fd00c881dbeb2281656d205cc","sha1":"1c86714cee8c6c27504f936fffabbcaddd255997","sha256":"34346faa9e867747f76af5c2086815a9399714f338633f36c6a8b9d21fdf32c7","sha512":"7d6bb5396dc0b59fc810be425359470ecf4dde530f93a16dd552fe818614ed5c06751308c3d3ae7083d6071b0dd447c5db86441e5a7d01d7b8ace973f084df2b","ssdeep":"","tlshash":"7f510853534b0182fb83123e265123205786ef259fc2973b23820d48af21fb9c9a53d1","first_seen":"2025-11-18T20:37:14.673822Z","last_seen":"2025-11-18T20:37:14.673822Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":77,"dns":0,"connect":26,"send":0,"wait":70,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niceoffersz.com/favicon.ico","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"ip":{"addr":"101.42.171.214","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:42.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niceoffersz.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 04 Oct 2025 00:00:00 GMT","end":"Thu, 01 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:4B:C7:3D:5F:F2:53:57:10:02:40:F0:F4:D3:82:F4:06:91:14:A0","sha256":"18:3B:08:C5:82:CF:48:59:5C:FA:FC:72:14:16:7B:CD:A0:4E:0E:EF:78:FF:19:7D:D0:ED:C7:63:E8:C2:CE:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: niceoffersz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.26.3\r\ndate: Tue, 18 Nov 2025 20:36:42 GMT\r\ncontent-type: text/plain\r\ncontent-length: 18\r\naccess-control-allow-headers: Content-Type, Authorization, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self'; frame-ancestors 'none';\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-request-id: 1763498202080982630-b7706424f84079ce\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"53af239ee5d3e261545dededcb6ffd57","sha1":"04ca7e137e1e9feead96a7df45bb67d5ab3de190","sha256":"99eb12f2ab3c4866a353e098ffa3cb7a967e617c49b98480394ec5d8ea92b094","sha512":"c734e4a5ff5d335a91518dbf47861bdaf8012af49371dcd2e3350e269c9a5a1cc094114d17c4f5b053f3757b4b07487ebd0d309c91ef97acf4665cc5d5c9a2d3","ssdeep":"","tlshash":"ec70000c080202082020002822800020080802002a802220000aa00882000000800888","first_seen":"2023-04-05T07:16:36Z","last_seen":"2026-04-06T06:52:50.388804Z","times_seen":3713,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niceoffersz.com/","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"ip":{"addr":"101.42.171.214","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-18T20:36:39.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niceoffersz.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 04 Oct 2025 00:00:00 GMT","end":"Thu, 01 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:4B:C7:3D:5F:F2:53:57:10:02:40:F0:F4:D3:82:F4:06:91:14:A0","sha256":"18:3B:08:C5:82:CF:48:59:5C:FA:FC:72:14:16:7B:CD:A0:4E:0E:EF:78:FF:19:7D:D0:ED:C7:63:E8:C2:CE:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: niceoffersz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Tue, 18 Nov 2025 20:36:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-headers: Content-Type, Authorization, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self'; frame-ancestors 'none';\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-request-id: 1763498200663298209-679b66b5d6ce6830\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31121,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (390)","md5":"df0ff7e4b473e8f793794f1a591a8a79","sha1":"388e70be828e6ed0e9e5dc05ea2b92208a59ed7d","sha256":"9ef7588d0343e222216a8c8361b877ad07e44372dbadd804185ff4169fe2bc96","sha512":"93cc36d28fb945d7faabca59c1b0c3a90834565e489af7424a5a89105bae4b8e00c3b88b9a2841f088be5c5642e45ea4b4eb8affd08f84625a41191b746fec2b","ssdeep":"768:gj4T9fGgts4CkBwAh+Bf7E1hUuzqwSsBCP5fJbtzGPslaekML:K41hRZS4e5fJbtzGTML","tlshash":"a0d2343925e267ab41d3d1b1f7555f29aaa8ce0bc527dd0bb3ac02c21fc2e918d53358","first_seen":"2025-11-18T20:37:14.675552Z","last_seen":"2025-11-18T20:37:14.675552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2842,"timings":{"blocked":1308,"dns":615,"connect":224,"send":0,"wait":226,"receive":0,"ssl":466},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niceoffersz.com/static/font-awesome/css/font-awesome.min.css","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"ip":{"addr":"101.42.171.214","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niceoffersz.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 04 Oct 2025 00:00:00 GMT","end":"Thu, 01 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:4B:C7:3D:5F:F2:53:57:10:02:40:F0:F4:D3:82:F4:06:91:14:A0","sha256":"18:3B:08:C5:82:CF:48:59:5C:FA:FC:72:14:16:7B:CD:A0:4E:0E:EF:78:FF:19:7D:D0:ED:C7:63:E8:C2:CE:E0"}}},"request":{"raw":"GET /static/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: niceoffersz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 31108\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self'; frame-ancestors 'none';\r\nlast-modified: Fri, 14 Nov 2025 20:18:05 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-request-id: 1763498201125995672-a38d739fad415fa2\r\nx-xss-protection: 1; mode=block\r\nexpires: Wed, 18 Nov 2026 20:36:41 GMT\r\ncache-control: max-age=31536000, public, immutable\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30945)","md5":"9817888a35b373d6bb80a55b63da70f5","sha1":"32c0334824394d70c04a7637b94b8640b21c0bbf","sha256":"163db3919e309d7b70f0273edd26c9b948bfdbdfa4ed5199f380f09118a72e96","sha512":"c365df41949283407e01e69454b094d1b99680e8406faa8d71ac8eff181a07eb9090f3c2d6fb3b60c75535037f89c958056154712d3e2e48c7e8db00c16f0e30","ssdeep":"384:eHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:ewlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"fcd251e8e54c01d66731c48bff81b36862b6fb3dd5844da9f01f290c29d226562c5fba","first_seen":"2025-11-18T20:37:14.676722Z","last_seen":"2025-11-18T20:37:14.676722Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/teacher1/100","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.4.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 20:45:18 GMT","end":"Sat, 31 Jan 2026 21:45:03 GMT"},"fingerprint":{"sha1":"18:5B:55:C2:2E:4C:E9:12:F6:52:2B:9D:96:08:23:3A:BB:C3:AF:E6","sha256":"E4:A0:72:49:A4:25:E6:9D:02:2D:79:3A:EA:5F:A2:AC:1A:89:8D:CC:33:7A:FB:6D:79:E8:E0:A4:C6:BF:66:B3"}}},"request":{"raw":"GET /seed/teacher1/100 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncontent-length: 0\r\nlocation: https://fastly.picsum.photos/id/466/100/100.jpg?hmac=15Hjzs5oHgFaNN41Kurw7PjUxX-7Bkg6Macv3z2p47c\r\nserver: cloudflare\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEOJ5NbPpriEjjDxZhOEqunTDwyAYW5FL%2FJhalOW%2FBKxaC51yBkXakkfLoLlliIT%2Bf9XeiXD270sA8L7c6mpGxbbGA3GSzDDvNdUBA%3D%3D\"}]}\r\ncf-ray: 9a0a42ed2a8235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":78,"dns":29,"connect":4,"send":0,"wait":63,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/964/100/100.jpg?hmac=_id-TbaudbdfOV6_2_XIt8DpumpQJ7SdJFJ-m7Od_wU","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.193.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 08:32:05 GMT","end":"Sun, 08 Feb 2026 08:32:04 GMT"},"fingerprint":{"sha1":"05:97:0A:92:BF:81:59:6E:DB:3E:90:36:41:93:B4:BE:21:97:12:7F","sha256":"3A:29:E5:21:CE:98:B8:B7:12:2C:FA:C4:35:57:AB:32:16:97:04:E0:66:0A:B8:0C:78:5D:3B:63:A7:1A:52:4E"}}},"request":{"raw":"GET /id/964/100/100.jpg?hmac=_id-TbaudbdfOV6_2_XIt8DpumpQJ7SdJFJ-m7Od_wU HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"964-100x100.jpg\"\r\npicsum-id: 964\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\nvia: 1.1 varnish\r\nage: 106636\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1763498201.339222,VS0,VE5\r\nvary: Origin\r\ncontent-length: 2316\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2316,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 100x100, components 3","md5":"f7cac1cb5b47cc8e8b79421343b41a84","sha1":"a31e14ad4536d224bb5d975367fdc4d2bf3b39f9","sha256":"9a669c9df6e39b6b935c7b2ca07f7531cd71cf2ab69fe4e634cc4a911592a65d","sha512":"f33b8b798706fcbfa74174f0510272f29deb02a9f2ff407e881ed5d8845c5bd14dfecc273708ae6e66846967b0b210ddcf7b50d1394bb3e819bace3b4c8a96dc","ssdeep":"","tlshash":"01411a17bf5b7902f722063517285b5ef701df100912a276b9947a5d2cbaef14ca4b50","first_seen":"2025-06-21T11:02:02.606067Z","last_seen":"2025-11-18T20:37:14.679828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":66,"dns":1,"connect":30,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niceoffersz.com/static/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"niceoffersz.com","domain":"niceoffersz.com","tld":"com"},"ip":{"addr":"101.42.171.214","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"niceoffersz.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 04 Oct 2025 00:00:00 GMT","end":"Thu, 01 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:4B:C7:3D:5F:F2:53:57:10:02:40:F0:F4:D3:82:F4:06:91:14:A0","sha256":"18:3B:08:C5:82:CF:48:59:5C:FA:FC:72:14:16:7B:CD:A0:4E:0E:EF:78:FF:19:7D:D0:ED:C7:63:E8:C2:CE:E0"}}},"request":{"raw":"GET /static/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: niceoffersz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://niceoffersz.com/static/font-awesome/css/font-awesome.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.3\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization, X-CSRF-Token\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self'; frame-ancestors 'none';\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-request-id: 1763498201842302703-2b6834038a29e410\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-06T09:12:33.349096Z","times_seen":415356,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 05:49:32 GMT","end":"Wed, 24 Dec 2025 06:49:31 GMT"},"fingerprint":{"sha1":"37:B8:AE:00:DB:7A:73:F7:AF:A6:35:4D:DA:CC:E2:3F:A9:F6:2D:08","sha256":"8A:02:37:DD:0E:05:31:6F:04:7F:E2:CF:14:B9:C1:2D:68:75:CC:A6:F5:E5:82:4D:53:69:13:D3:A5:8B:B9:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::zq5nq-1763497203151-c1dffc3d8dd8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 652\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qup%2F2Z7x7xGo8LGxnxVbXfIqfcMQUIBM0DZk4iJ8niFrfHr1V7nPsTXUA2lrK5MuoJzZPcHGZjaV6YFx3%2F4CTK4i372pD3FMfqLjeZPfwBs%3D\"}]}\r\ncf-ray: 9a0a42ecd9dc712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":38,"dns":19,"connect":1,"send":0,"wait":9,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"niceoffer-1304667505.cos.ap-guangzhou.myqcloud.com/indexPics/scancode.jpg","fqdn":"niceoffer-1304667505.cos.ap-guangzhou.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"159.75.57.69","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cos.ap-guangzhou.myqcloud.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 11 Mar 2025 09:02:24 GMT","end":"Sun, 12 Apr 2026 09:02:23 GMT"},"fingerprint":{"sha1":"AA:30:9E:29:F4:A3:DA:F5:14:2D:97:26:82:0B:76:D1:DD:17:1D:84","sha256":"7C:10:8D:F7:9B:75:D6:C9:24:3A:E8:77:A0:04:96:55:0C:9C:2E:E8:48:A0:E9:2E:A5:7C:B7:93:F2:6C:23:91"}}},"request":{"raw":"GET /indexPics/scancode.jpg HTTP/1.1\r\nHost: niceoffer-1304667505.cos.ap-guangzhou.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nContent-Length: 111850\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Disposition: attachment\r\nDate: Tue, 18 Nov 2025 20:36:42 GMT\r\nETag: \"0fbc94d52df652c5f8855379ca71d805\"\r\nLast-Modified: Tue, 25 Mar 2025 10:11:22 GMT\r\nServer: tencent-cos\r\nx-cos-force-download: true\r\nx-cos-hash-crc64ecma: 9241875040715220341\r\nx-cos-request-id: NjkxY2Q4ZGFfZmVkMjMwMGJfMmIxMGZfY2IxODBiMg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111850,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 796x1134, components 3","md5":"0fbc94d52df652c5f8855379ca71d805","sha1":"66c33660abd83e5fb97a430cc7120b41712a2902","sha256":"50bdbd1d5a00e40ddc35590cb30c60f2789ee03e26d8de552c10e3ee22eac543","sha512":"8b27a63fc46b5d902c4960689d60037c9e346411562b10de82eb466ea6a5d3b84608a5c9de6f6125339b348adbf916035d8b7def411fd66b158ded16a6709f50","ssdeep":"3072:F9usC7mioTpCpYxAc/tRcg3uogvJqt9zbrtr:/7KToSYac/VyJ69Z","tlshash":"45b38b0798254682f07953b9fe475b9d2e4a7f48f4977afb00660ecb36712268c8e07d","first_seen":"2025-11-18T20:37:14.684177Z","last_seen":"2025-11-18T20:37:14.684177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3823,"timings":{"blocked":1601,"dns":448,"connect":261,"send":0,"wait":323,"receive":291,"ssl":896},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://niceoffersz.com/","date":"2025-11-18T20:36:41.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 05:49:32 GMT","end":"Wed, 24 Dec 2025 06:49:31 GMT"},"fingerprint":{"sha1":"37:B8:AE:00:DB:7A:73:F7:AF:A6:35:4D:DA:CC:E2:3F:A9:F6:2D:08","sha256":"8A:02:37:DD:0E:05:31:6F:04:7F:E2:CF:14:B9:C1:2D:68:75:CC:A6:F5:E5:82:4D:53:69:13:D3:A5:8B:B9:A4"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://niceoffersz.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 20:36:41 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::nxg8x-1763490513353-9194ec46acfd\r\nlast-modified: Tue, 18 Nov 2025 18:28:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 7682\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5BYSALcWNaqs5BnX59Jj%2BedwXsJK9vn24iiTFvbLHssCM06ehh7UssGSCwcqHu53a2wP5VdNP9Nnu%2BR1ZALwz9adYSVg7O8LtggzVwvNzA%3D\"}]}\r\ncf-ray: 9a0a42ecf9f5712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-06T09:06:10.058262Z","times_seen":29000,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}