{"report_id":"ba127f1d-616b-467f-b51a-d6e3d2aeba05","version":6,"status":"done","tags":[],"date":"2025-11-10T08:01:54Z","url":{"schema":"http","addr":"rudaltoto11.com/","fqdn":"rudaltoto11.com","domain":"rudaltoto11.com","tld":"com"},"ip":{"addr":"172.67.168.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"title":"RUDALTOTO : Bandar Togel Resmi Hadiah 4D 10 Juta Terbesar Dengan Platform Online Terbaik","dom":{"size":6324,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4860)","md5":"1076412f07346991fe93210a78d4aae4","sha1":"b660a1646cd4b4bcb1c9486a8c385870cc85ce23","sha256":"b2472a5562065d59342155d39c00e912204ffe2fbac5fa14d6ef8671bc96451b","sha512":"c215ee7211963be9abbc4b822fd3eee60441665865b46a74c4d3a095b9d27f339749cbfa8ab32b8e1327faba2ccc39abccafee02470ca554b21a46e010a6e6bb","ssdeep":"192:bgG2WszNnQ9Ucnt+sa0onjLMMDON8qi/LPNgGkPXpfC:vW3jLROpi/LPNgGkPXpfC","tlshash":"5bd1523f417123298027ed6c4bb477074178d8667daea7ea25136a19d7cba8305f338b","dom_hash":"domhash1b4ad9dcc14e775302ead940e1ae03a3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rudaltoto11.com/","fqdn":"rudaltoto11.com","domain":"rudaltoto11.com","tld":"com"},"ip":{"addr":"172.67.168.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-15T08:01:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-09T22:13:15.598397Z","alert_count":0,"request_count":7,"received_data":198766,"sent_data":3972,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2025-11-10T00:14:28.231647Z","alert_count":0,"request_count":16,"received_data":1105446,"sent_data":7645,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.livechat-files.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-02-13","domain_rank":159656,"first_seen":"2020-04-22T09:40:29Z","last_seen":"2025-11-03T11:15:53.591197Z","alert_count":0,"request_count":1,"received_data":1249840,"sent_data":511,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imagedelivery.net","ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-09","domain_rank":15876,"first_seen":"2021-09-20T12:34:55Z","last_seen":"2025-11-10T00:56:05.692572Z","alert_count":0,"request_count":1,"received_data":3399,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"secure.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2025-11-10T00:14:27.961831Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":726,"comment":"","tags":null,"fingerprints":null},{"fqdn":"object-d001-cloud.cloudstoragesharingservice.com","ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":197194,"first_seen":"2023-06-28T19:31:32Z","last_seen":"2025-11-04T04:24:07.977534Z","alert_count":0,"request_count":2,"received_data":179916,"sent_data":1014,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rudaltoto11.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2166961,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":249223,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-11-09T22:14:45.838019Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"daftartoto.co","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-07","domain_rank":1437135,"first_seen":"2023-10-07T08:43:11Z","last_seen":"2025-11-07T10:55:01.15948Z","alert_count":0,"request_count":5,"received_data":534324,"sent_data":2254,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2025-11-10T00:14:28.943525Z","alert_count":0,"request_count":5,"received_data":23241,"sent_data":3031,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-09T22:18:23.201927Z","alert_count":0,"request_count":2,"received_data":90701,"sent_data":919,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-11-09T22:19:26.142871Z","alert_count":0,"request_count":1,"received_data":88169,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"5a2d1jp7lg.rudaltoto289.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":95,"received_data":1993068,"sent_data":82164,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2025-11-09T23:57:28.872507Z","alert_count":0,"request_count":91,"received_data":16041746,"sent_data":62028,"comment":"","tags":null,"fingerprints":null},{"fqdn":"landingsplash.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-09","domain_rank":97769,"first_seen":"2016-04-22T01:18:08Z","last_seen":"2025-11-04T19:20:51.813343Z","alert_count":0,"request_count":2,"received_data":180447,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2025-11-10T00:14:28.044852Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/jquery.cycle2.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3981c014980610a347911b3eb292b722","sha1":"a19a589bbf0d0a607557cc93768fa68ec4d9b87e","sha256":"6b41e47a54aefc08aaa3678ed56f5689ddf69b8e8a48e9af8acc200ed0559fec","sha512":"a1e7501a56f8eb568e1c954104a2e0c382d2cbf9ffe386d1ff47374460156e1813374c69250ea17d5fd9f2c8d9d8734504c8782ca09af0b503d69efda13479e2","ssdeep":"384:dKoMqqIIaGwjZufVdJHqktq+3XlTXdE4VzExmRCqfL:PqXysVdJKkNTVCmP","tlshash":"3fa2b728b249396295f328f8733fd00b17f12d776950d6a170e2c7c96e74946b226bf8","size":22288,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.915069Z","times_seen":2307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.B-chZHUs.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d91b02d94ed3cf9be252f5ae9c2690e6","sha1":"07929952caf1cf7f02611eef2031580d24041941","sha256":"292959df1482244a7039196504e1af92839beb061f6bf5ea6e44dcc939f53ca8","sha512":"fb715838171a851753fa7afa62fd0ea772e0837d5c7b3fa10e34b4d1d4c50a688d67b8cd97310deede839fb52478f852ed50e4c6ada59ea2eb791deb16da8fa3","ssdeep":"","tlshash":"f5e07ddf60d2f0f24385bccc45209181d368dfd01fad81e0c02c5f9057101828836ec8","size":310,"data":"","first_seen":"2025-11-06T11:41:58.449998Z","last_seen":"2025-11-10T08:03:20.080767Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.CLsZzRd8.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3d2a568817d53ab290d2a378d489e493","sha1":"aae9144b3ec2729ab947169d089500a2dedfbe32","sha256":"0639f166c83161ece747ec9c46af182537d315c4a6f2ccde19114a6d277c64b9","sha512":"e74c5a251efd275651e9f26b4da981e052daeb02ce590bf49a421f72ae9dce0fd14b2dcfdcff36229bfd8ade77bec612a065908f7c526e5d8defdfc82735cbb0","ssdeep":"1536:NgZQbc7oU6uh2Cv/tuq0s76cX7tx5sQT4tGFy3i0QjMC8IKwBz8YBiucFQ:NgKbc7opuh2CX412yy0ScOBz34ucFQ","tlshash":"c0d308e83995f5626bf312a700af5817b33c191b280c8960a211fdddb5b805eb17bf9d","size":138438,"data":"","first_seen":"2025-11-06T11:41:58.430456Z","last_seen":"2025-11-10T11:28:01.973325Z","times_seen":424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"javascriptURL","is_inline":false,"md5":"69165ebff8690c39998558705627e927","sha1":"b86888593992fa44c3d1fe1c665367cb214e5416","sha256":"0de7a49f6d21fbef846aba4bd271502d7ec9489bfbb3fd96f5ff7cf19140875e","sha512":"5ba1e5e8c8d56c3f9e73156c711a2a9e69dc86f53f47ce07bd59f79e9f8190e0a63a46c05270582b3afdc144f98d15622a902864c5635409e682c317640a2371","ssdeep":"","tlshash":"4250000030000000003000000c03c030000000000000000000003c003000f00000c000","size":8,"data":"","first_seen":"2023-04-10T23:38:56Z","last_seen":"2026-06-03T16:38:17.998329Z","times_seen":14114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/vbulletin_md5.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","size":5689,"data":"","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-06-03T16:38:17.866867Z","times_seen":2135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/parallax/jquery.parallax-1.1.3.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1508097fb2657eab7e68bd385cfbdbb1","sha1":"c65b4cb7750055e01101a4edb2f7d2d749e85174","sha256":"ba75543913b3258b7a19cdea608c7cc47322898d244b40b6190c970be2d3a2fd","sha512":"fb2b63f3aa3e83603dd8ac3211bd4624c00a0f534935dda13ad959121608d3bd7e3d5fa284c470692a9c57129ee665cc4a39bc4697d09c45841f506d9f5a7db1","ssdeep":"","tlshash":"0f115b38bb107255c96a762f0b3be309b21736415c028124d229e5dc6ea9a5bf86ac68","size":941,"data":"","first_seen":"2023-03-08T09:00:45Z","last_seen":"2026-06-03T16:38:17.987808Z","times_seen":2122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/style.js?v=1.0","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6174734545f4d0a24a22ae2f24526eaa","sha1":"969abdca32818ce8437a095b6c1e478d2bf70345","sha256":"d943adf3ed1dad80fb33a3380e56e5a584293f8d1694dbb6d5c5d1c6036ee406","sha512":"017d07cb8e391f853c7add6f7ecc503c09791b8a76a942bd51ecd55d203ab5d773bfdcc90b33f911ced9a4538f6d0e28f7141055449e2f9dfa29976b0cbfa955","ssdeep":"96:xEU393Bu563333G+3v+3tZYJWqr8xZMq038T4hfclwCBMkyZH:xEU393Bu56333R3m3s8xZMtMUhfewwMD","tlshash":"6ec1438ff251143505fb373a822f5b09af7f2a1a4945d124f0fb46a41f6c509a767e4c","size":5854,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-03T16:38:17.869908Z","times_seen":2108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/vbulletin_md5.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","size":5689,"data":"","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-06-03T16:38:17.866867Z","times_seen":2135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc8e0ebcc34973dffb3d4d0446e9ad91","sha1":"c86a2a821de63230b8584e0fbc9c098bad80b6cb","sha256":"158356aa59435d57e27796cc15b0ddf57c65f51b640a0060c69255dcb31956b5","sha512":"1838626af191bf8b2bcc9d66717d31386e8a40c433b4ba25628b20e25d247685b57a72d6a0f95b03d5e78de577fe79ff54c1070a1ec3673b9f34fa9852306365","ssdeep":"","tlshash":"f4f0235c3c62b05737f93634c2238a6f3355070131c35524ca05cc2438905860846c8f","size":445,"data":"","first_seen":"2025-11-10T08:02:24.887707Z","last_seen":"2025-11-10T08:02:24.887707Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3563804a757b4a2420c6f0dabd5585e","sha1":"5c631a212995ed3dfe87408bd094932ed5186ea3","sha256":"1b509b4535710e9d0ab3131a6a4e167adbf25edce520ab00248c35a99e669b23","sha512":"45059b73632300d9cc83f7c1cbd2911c9c3fcb681dfc06fea0ee32cd0dbe89a455a98c315f7c716264d519e3a2ee184d31668f6c2316e5b12fc02466c3830506","ssdeep":"1536:EdWjuJri/36ouUcb4meyLbJX9+rg+Scwp7petAQPlSGSFfq1k:E4juJu/qT4yLbv+r/KLQNV8fR","tlshash":"4ca328d67282b03053f786aba17fa316b2392918340d8420f17cdd6a395adc79177f6e","size":102075,"data":"","first_seen":"2025-11-06T11:41:58.504283Z","last_seen":"2025-11-10T08:26:44.534098Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e5355fe2142bc0cd54d0ee00358ada0","sha1":"2950703916e228af24716d8c0ca3a1158e112903","sha256":"e4f341eb43aefab8c96f77b7b2b9127a533998edbbd3ed15b2498c842cd016fe","sha512":"166ef6a4f7d5759c3464047ff64c14b627257b95ff8275c725ff0fcc2f5f259c6850a058ccef3e8583ae7c38ccc895f2ab37b1000741e7453ead3b76768ba06d","ssdeep":"192:Fw3J1n76/NFr5ux1xADOPlWUY6M9hpXIT2wAh+Rj:Fw3ve1TbqdWUr0RwAhe","tlshash":"7222d68ebd5c682119f40c710a77b9cf073f8b925454bc55da128eaabf24b6c2c5af09","size":10059,"data":"","first_seen":"2025-11-10T07:45:38.081567Z","last_seen":"2025-11-10T08:02:24.810068Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-06-03T16:38:17.99956Z","times_seen":26104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e07581627679fb6d9959ad31c5547b2","sha1":"532d64cda24fe3a4dbc3ebeac323310044658b9e","sha256":"601816a8b851e6706777e2cdbe2d7ff0a6973a734fbe6895deb33b0e9306652e","sha512":"6045c7f730ded5d79b75c94ec0f326da99a0bd4120aa7b145fb05fc8dbd89697e77cb476deadd847760de7d0855c8849e0c4ba1383073d9b6ec639e3e7d8ef4e","ssdeep":"","tlshash":"54c08c2b84a18086557aa06cceab6108984368236406c802bf0c9a801f2202b861238c","size":154,"data":"","first_seen":"2025-11-10T08:02:24.890089Z","last_seen":"2025-11-10T08:02:24.890089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a870328150f5bb4ed5499b925abb7b16","sha1":"eea8d174c89aa577c165661069dc87da409c9b85","sha256":"bd6c251c175579762c81828a0e8fa26c77ef270521844cc7f85420f96b702a51","sha512":"12792064754a8663be5815bbe07e11b1d7088e4e8b43b1af8fc971ff810c3dab972e10acedc0efa81e20fe1b1f3ac02c4dd87dbcc6daa564cded4ed36d025382","ssdeep":"","tlshash":"c301bd89bc467076aa96322c713bfa07516216296844683359eec7bbef32d9b410368c","size":747,"data":"","first_seen":"2024-08-20T20:49:25.639102Z","last_seen":"2025-11-10T08:02:24.891492Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5c01714484fbf19856fc5f205e463e","sha1":"f3057884e9bdac343c71682dbb26e25e38de579d","sha256":"398ab2fd9bf41f6e5ee7be12052815b5b84b7768f1387e1222475734bade39b0","sha512":"d265780554422bb440eb550c9cdc6102d7ac7ba1145231dc993019ce153de0ca847cc8cd8c509f0a6be2a965ffa007b32a1f4b24a9b99d8f0b0740e4cedadf1f","ssdeep":"","tlshash":"70e08cae90e218618ebe732e6f0780e0b1300be30048d0c1764c5dc09fc013342b1fe4","size":401,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-05-20T16:46:01.213876Z","times_seen":1934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ef547433cb8d410576b39f153359ff1","sha1":"3777a485117b28dc095edb7a2ac1a05d3a7b1c93","sha256":"4c42e2628a930bd386abd6020674e8072084ce2bfba1f44ee8363a1638088456","sha512":"8fc74ef175d45094781e77a5ee6357043eb18ff55133c53788801081209a5e46fb7f9a10bd6519b44711a76839bad4b796b568ec12af778ddcc6cea92ad6e048","ssdeep":"","tlshash":"c0e0cd226e420c49965708ef14728b4859a4816253179f47f77a84962649455b628ec2","size":300,"data":"","first_seen":"2025-03-10T18:34:18.366918Z","last_seen":"2025-11-10T08:02:24.892853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57f5894e4187a3526d1ed52fe3755968","sha1":"897a184e0c440df36082e905d0710c2bd0f0ccca","sha256":"0e7c410c8f406e849b50b8e25f9ec3d2aefe04d21609c992820f454acf8050fe","sha512":"b128dc26070c64e9b038fd668263755d51928609f55f62906f2c22e92ea19e8507f65b5fce1a66a668576392cac83775a8cd4fce30192d56840cda9ba72bd0cd","ssdeep":"","tlshash":"17f08b25a0e0220b5b7355f75527f7107c46295ac257c9d8745caa90af96daac01680d","size":533,"data":"","first_seen":"2025-10-14T07:12:59.531946Z","last_seen":"2026-03-01T02:55:44.066496Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/frontend/desktop/template_v1/before/index.js?v=fqdznpgxv2jki2wxbnbz","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e5ce401fa29e20cf8f52e5d754a5d5a","sha1":"b55566fc452442bfffc73943eea5177ccd00fcac","sha256":"7f1d23659e76eca87d310351b7598a64201f99a8be2a947319f0182cdc3b0cd2","sha512":"e4ac4422d6aeee85a36002a6ca346faad7e1de6510ed0253b2130dfefba2bf6d3e186a0907af294df5d71118a002f6dfc6cc9f2e4e9eef40ce374fed672bcfd5","ssdeep":"192:ATn2PoqeRfRll0OR4HCcbNQNJ/OhxwBZcAoL/3eqnhqgSt081qq44WIzEtMyCGWV:YpqEPRfeIJWhDAoSD3t0mlxWeyOfOydJ","tlshash":"3c4294c8b6c6f47503d36670902f1106f23a6919b51d9480f72de9d2be7884ea237fb9","size":12408,"data":"","first_seen":"2025-04-15T10:15:48.992845Z","last_seen":"2026-06-03T16:38:17.875329Z","times_seen":1772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"003bef89a94c7e2af747cbd668f1218c","sha1":"1cc640178ce5a27cdc25f93004ad69cf101ef686","sha256":"fe4181684b67e7290849297ce15992572b02b6cd3bf34dffc8ed90521c3d95f7","sha512":"24652611acc97e501498ab296245143dae97bbe63941d549d8f36d6478d8f4ff592de076d8c94b6def43115e137758b70525eb5275ba81bd6a6a444c7d4b8454","ssdeep":"","tlshash":"ef4174bd341ad507950d46c0e66297dc5343d58a833188abd199339f3ec94ba1b39b8c","size":1982,"data":"","first_seen":"2025-11-10T08:02:24.894108Z","last_seen":"2025-11-10T08:02:24.894108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"276f21de93b21583a9636080d796e564","sha1":"c8389ec58748517c784ae611d5c88fec43181ec9","sha256":"3a2e94cd47ca00c274c6cd3c9a12ad9047db45c5dd337fcbd9e81893d5133aac","sha512":"cfc3495b382363f9e5f02ae60118b8f142d23657e24c387e67b7f89d3bdf439f8a828f61da2c2545988c09d27a5caa30dd077811bc810fbdec20eabbb8baa30e","ssdeep":"","tlshash":"82414420f265270ab27be4c6b52217896602471bd603460db1fd79cf5fca8e8765638e","size":2222,"data":"","first_seen":"2025-11-10T08:02:24.895026Z","last_seen":"2025-11-10T08:02:24.895026Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/bootstrap/bootstrap.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d08775b7d337d5f37e3fb102f1a8a913","sha1":"6cbd6f79def44d7e96d933a17967cd2afcf9ba3c","sha256":"8ae9a41def07afb4166b08e3143071437d1867e5f26e6bd907899a8b50bbafbb","sha512":"458415d96f8a83f130fdae57e3322c75b67269f4eb57494074e06b757eced0730c58ca73a8c65148c19b9126653ddcf66e3058426b921e1bd51c3b7369a5f05e","ssdeep":"768:poBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:qAr2MRCqc","tlshash":"b7e27446b230316107dfb2e5515f020b723a6a6dea06907c38b999f53db9c48727bf39","size":31650,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.914513Z","times_seen":2433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"129f5fd162665cd0abc0f39fea8c9e8f","sha1":"253c21387dc8055cee42777276f455c7794de3cf","sha256":"a6336811b695da7dff581c054bbcb90502e899d034ec0f26005f91236c3817b1","sha512":"c6017466dbe4147b237b174c099b386869ee7adf1c41bb7a46df29febd2ae551d7059c590b4cdd76248b7414262ce0c856deeb174e6ccdc8a45dc9d820d505a0","ssdeep":"384:jpWcj41o2t8Z75jf5E1vcNTTCD2c5cDgk:NWcj41m7av8fCD2wk","tlshash":"d0b2a5523250233482e332fe55af510d763afb74ad428169b06285eb366754ed273f3e","size":24154,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-06-03T16:38:18.013841Z","times_seen":4549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"18e2d6e8b9e3df2320380954b7b71ecb","sha1":"d55c3b906a0099c4515ea51511a975c0ea5efa7f","sha256":"e34376ed2806b2f95b292c29c338b077447fe54b58d980c50429c1cdf1b2581e","sha512":"b57da1d4ab315168e074743ca0b82568d6ee858947b496b3d45a1b9ffc95bed70e6c1dfbf55d4bbc7126f792d0b327daf820ca44589fee5714aa682cbd559489","ssdeep":"","tlshash":"e7a0128124740034d85b030004c424002b4c480440092055417b2311530950e303eac8","size":83,"data":"","first_seen":"2023-10-22T12:08:37Z","last_seen":"2026-06-02T21:04:37.871001Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.D6G2c1EB.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"00edf6f001085203ce6e266def4f2d12","sha1":"fa4120e97744a4c8223cbd541267a603ba7a7319","sha256":"15580f859ce724072441a3c7e2c76c1bcf490d849c23b3c1dd7f186ba85632fb","sha512":"5169e393f9490760e67de30e5ebb03a73cb684799176c994769ffb242ae598f38e8dbebe0e47e3873872aa8ec1f22efe85a268c6b386686803efef765b8c9aea","ssdeep":"12288:QdevOG8tnGsyxkC8rMQKiHbh6MK1rJWI1OgtuuJoSpXpPK5tf+5qqGFjBee1m9Lg:QdevOG8tG1WIXE1","tlshash":"16847de07342f539d7e3c15b94bb2609f23d3e19b82a9520f1ade8ad33944489277f64","size":403748,"data":"","first_seen":"2025-11-06T11:41:58.521536Z","last_seen":"2025-11-10T08:03:20.145271Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/jquery-2.2.4.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b354cc9d56a1da6b0c77604d1b153850","sha1":"a3d8479f4d4e39b131bc9a53bbf53d1fbaa23732","sha256":"fdce77a6d0053f32d231518a84a71bcab5c86045ed52369da00b89d4284aef46","sha512":"b6dcbe11a0f90ef61a071fdf7d8c637f95fc77969cffda9f291772b4fa2c2f9020eea2916da6f1113d746afeafbf592d0db79fb2f2f5400bc0a0fc10a066ba98","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a98Q:v4J+OlfOhWppCW6G9a98HrU","tlshash":"1783c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85577,"data":"","first_seen":"2023-03-07T01:06:18Z","last_seen":"2026-06-03T17:18:38.872881Z","times_seen":8387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daftartoto.co/messege.js","fqdn":"daftartoto.co","domain":"daftartoto.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff3646acb703a4755521a96df6dc0ac5","sha1":"c108d8874d713c0fe3ded57a30d63a8cad360a17","sha256":"247bba5eb9a69da13de4b022026d61f77bf633a80269af84279cf2c369504653","sha512":"063c816d0410e7f14ad5d5c278f68f23a7892c6d302ab8d3c2a8ddeac8cedf0e61feb3b7c192302c4c8a341f17e5e8b0c24309c1812d7f14e9d1b74f5134a6e8","ssdeep":"192:LE6EXbGa1z2JorI+CdqZk1DRWpiItZxGBwRa2WKMaRK+dpF2zWGJ836+4LgTgouX:I6+Nx2sISk1VW4Z+RpjKuWi6PMsFdQVy","tlshash":"1092dde4ed4359d782c74aafe2b7f3c5f856ec3eb5c40c0a94016e1056a6129afe1732","size":19826,"data":"","first_seen":"2023-03-10T02:24:09Z","last_seen":"2026-05-10T09:15:34.303525Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e384fbf9db7ca89b6ec6d6f5334d2cbe","sha1":"9aee70a672715bf16bbbc28ac68f434e004424a7","sha256":"d98db9c7f5975dc1acd4c8d3ef6cd2d8da05990ed935239e767c5feae495ed25","sha512":"ba0a05abaf2c26d9a30477f29c5ab1058d2847c2af94508ed5e7c470b88802eb5d79161a9f43f13af6fbf64373542570ba07c34c2123a1920f36e318576128dc","ssdeep":"","tlshash":"7ee0ab682fb950b100af57abf673df5c3c64806624029434080c8884aaa2ce18594efd","size":406,"data":"","first_seen":"2023-05-26T05:20:50Z","last_seen":"2026-05-10T23:57:40.159422Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6648ff3ac0475abb4606640d080ea8f0","sha1":"5031ce38fe55ffb0ee340a5ac818817ca446cf23","sha256":"c1a78d4feed472a73d5c73efce9c74d51ba79a29c356c50c666e5537fe0b6566","sha512":"02667ac4d5c27f34464071d85cb61ca41834e3d3407feddf815daa8e169f0467eb14a4eb45c6b3bcb255d0d345595477232acc89d9764632bc566cf351ef798f","ssdeep":"","tlshash":"8661dba188d9a92f520665c7c0202efda6d0e252c3a74458dfef05d76fd9cbc552039c","size":3322,"data":"","first_seen":"2025-03-18T23:20:19.026661Z","last_seen":"2026-03-01T02:55:44.08088Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14217423\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2F5a2d1jp7lg.rudaltoto289.com%2F\u0026channel_type=code\u0026jsonp=__lhrd4kfv7c","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"debbe84e0f321650b9de4b128062851e","sha1":"246ad2189c18469dd12ad30c447ab53cdd72ecef","sha256":"2c7bc216ec655868d8560dd645373a583772e28e3a881665483bf8c454aa9275","sha512":"c5c0c64fb1a4b270f4d685fa1a9303ad471fddb10b8ddbd68399ee16733d6cc7587cc0fa2d5d0748f05b01c7f20269d369022c13e956947d1e5c43ec14f31749","ssdeep":"","tlshash":"f9e06823a616697166c1a3f994043d17f938126ae4045cf8baae1720674e3cce32450a","size":387,"data":"","first_seen":"2025-11-10T08:02:24.806396Z","last_seen":"2025-11-10T08:02:24.806396Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.5/customer/action/get_localization?organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026version=ebde210d406eb6fca4bb56ffb070908f_dab1fc69d463ad2fa698150a33c6aee9\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c9a4fa6f89cf5990474cd16fa71df34","sha1":"5151390b287d4f5675e51b3a053ed4e634263832","sha256":"03edb1467ec607d4856f4cf1adab6c6c7754fcdca567955a3b3455d523271473","sha512":"c841daa5ec21a9d60556d4b3527a63fe2d98d6524e670da866c56fb211bf7cbe01b8b90b0def88bdc318e7c01c28e80b7062f0b45acf8e6f5a1fd12f39a28f88","ssdeep":"384:kpODwsgZFZmERb+5DQCBuLdAeAk+8qrJ0L:UxFAjHuJAY++L","tlshash":"0c52f9640eaa79aa0b2753daf5db5d1e38ec33649b401a2fdd984f3042847c1735be39","size":14275,"data":"","first_seen":"2025-11-10T08:02:24.864166Z","last_seen":"2025-11-10T08:02:24.864166Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.qTo0Vyzk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ea3964819a804474a836776bcb990afd","sha1":"b2b07d0f70379ad97271f00ace082ee003c255b9","sha256":"02c09b2760b9a2773d71605b8d8a4009425d35d84e11f193b4c951e72268859b","sha512":"389c15ad761f4878155575187b18f90d967b6fcff78aebe2bf9faa180ccd7c02b220f22cdeafc68106a3141df10737613c34ec16cf71bee910d97000b4038fc3","ssdeep":"1536:Wqxd3XXvvShhHTczlR6ogXf6tM3r3B1x1:nnv6hCRRaf6e3rF1","tlshash":"e9334ddfb281713157e315f3b06fa106b636292d384c80b0f629dd9925de44ba22bf6d","size":52721,"data":"","first_seen":"2025-11-06T11:41:58.413213Z","last_seen":"2025-11-10T08:03:20.087284Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"javascriptURL","is_inline":false,"md5":"69165ebff8690c39998558705627e927","sha1":"b86888593992fa44c3d1fe1c665367cb214e5416","sha256":"0de7a49f6d21fbef846aba4bd271502d7ec9489bfbb3fd96f5ff7cf19140875e","sha512":"5ba1e5e8c8d56c3f9e73156c711a2a9e69dc86f53f47ce07bd59f79e9f8190e0a63a46c05270582b3afdc144f98d15622a902864c5635409e682c317640a2371","ssdeep":"","tlshash":"4250000030000000003000000c03c030000000000000000000003c003000f00000c000","size":8,"data":"","first_seen":"2023-04-10T23:38:56Z","last_seen":"2026-06-03T16:38:17.998329Z","times_seen":14114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5896459ad6790d1d94eb2180e59e965","sha1":"e5d4b0ef3a929aa6e20ede86b024264a8cf2b473","sha256":"65723a3f6bf46e95bd82bbbc3f986c0df44ad1b4427abbc3fa252a53ff40b4ea","sha512":"de291f580572eacf236b4b7a51824e06cabce1f0544a5e2c7edd60f5cc2716757eee71069a1dccc42037d1704e4433e732469c46b74ea690911010cc6e1f50b4","ssdeep":"96:RwsLo8zljjmeC8CVZfOTfqjf61R9WTE6F67A6f8r6Fk4zzdtMTnO:RwSPNPcfOTfY61zWAAS8r6TBtMTO","tlshash":"57e1420db351525046ef3567211ad334276a86ab8c41e0b6b36cc4d7a7ebf181d33e6d","size":7420,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.866237Z","times_seen":2326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/tweet-js/jquery.tweet.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6d5a5f7a0d7af2a2c63b97919cac65a","sha1":"1f61ee273e334ebd7388e219157bf8654482f009","sha256":"431cff4d223f3296f7d4b543573271745a91d9069a3666844fb3b037aad844c7","sha512":"a8b64bfe5a39d6b58e1d5b9d1864ffb0e87be8e164a0cf71a39fcbad5c4a81fb4ad400dc6416e6a970265d3804954809949678bcc639fb10f763767777ac6922","ssdeep":"192:7IXczrVLA8Tmk+a5m21yVTp5Czsa5qdmzVQjBIxbFDyZ1ewMOVrkxmtUtkwR:PAOjXsa5wmiP1utkwR","tlshash":"63029370f196503b0ae32272b91b6390b73dca4bc5d5dd53c37594482fa5f96a232ac3","size":8209,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.987235Z","times_seen":2325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.DnPj2T1w.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8a92436070f049adc9c93af300c7ca20","sha1":"9eca9f6ed0780527935203e6d44d8d92feed7250","sha256":"dffbe0125d106fc480ff0241372de6006ea167475dd1765976d191021b45c6df","sha512":"7ac1e3ca1d9f619eb3f1a522e1ac46f08fa08d22f3e9ec4ce60f1f9c46d491a34581830087a3c0df7e5cbb1eca72cc77ae6a78db3018a286ed583139f59060f5","ssdeep":"1536:a7aVViMxWrbhebl9Y3dvHJHqJeHPYT9qYzPV/FcGb3aC:aLM0rbI+xHqJeHPYZnzcGb3aC","tlshash":"7c731ad5f296f1398bd794e511795043fa2a3a29b81c8170f36cce20215e6c2717bfab","size":74932,"data":"","first_seen":"2025-11-06T11:41:58.469118Z","last_seen":"2025-11-10T08:03:20.086734Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85ee138d96ad77af360351e6511b934b","sha1":"a3f10150116bc0a7af5c4b1286286f6d75314354","sha256":"5d07c2b26fdfa23aca5dbf8a5bae85ef52f8420de3888430a18266b5fd2a264c","sha512":"20a1ee33405f5dd55b87bb3ebb009ae93c03517c3013040cd4052bf143718c5d9b1f69523b26182d8f18828caf01077f0034e2ffe0acb4a890301ecfe57f8a12","ssdeep":"","tlshash":"9bf0dd3621f1b029615ee6ec1df1130c1c47604f70058e5b707f079d1fe52342123baa","size":633,"data":"","first_seen":"2025-11-10T08:02:24.899057Z","last_seen":"2025-11-10T08:02:24.899057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dabb3bff06c70ad912b578b901067f3","sha1":"99a2959c365349fe011e0d722ebaab885367a07a","sha256":"cee99fddc799a56da58b00863d723cf93e223b930f96860716b867a6bd9c4cb7","sha512":"2f7872316de8e94369c1ed84472f68a72d3b24fbe32614369db29eed609ab8be0d8436d8e7d1ae03aee561b7f1863f3fd86874b2a2e6d94f7d5bd2d1eb7e10b3","ssdeep":"","tlshash":"33d0a7a73c7989306399014b22b7e398767265946b31da4081c9cc2b5a21fd315e296c","size":236,"data":"","first_seen":"2025-11-10T08:02:24.90009Z","last_seen":"2025-11-10T08:02:24.90009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c19da374901605c3115983ff987086c9","sha1":"e15578aadcffdd52b7386feb19797bd6dff9b6d7","sha256":"533dff62bbf96371c685be96596173286b8769a6c6a335b782eba082e05b3dc4","sha512":"9d408f157a0380777247cef6c6837f74cb8d8309e1b059f6ea476480e17d565e61c0a5b6fda004165c9236b2c9f39155ff3bbb7a18883a11c4985f66ef3b56c9","ssdeep":"","tlshash":"224165b5f5ec5662bb058604d47179ecd00ed0bbcdb2ac47f0e2009faee4172a56b780","size":2047,"data":"","first_seen":"2025-11-10T08:02:24.901308Z","last_seen":"2025-11-10T08:02:24.901308Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/skrollr/skrollr.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d6ae9201bf4c1d83ebcacc6da3ec09b","sha1":"65b20f0c1dba10c7ba3d644fba7ae80ae08d4ced","sha256":"911dccc7a59863b46d628fdac57d96a7cbf72325fe2555d2a3d165c6258d3464","sha512":"023903172cf7ec0d5fb06f0ed9dbe90146ff5b2ddb8bf5db81f9587078d28d2c9cd22808acee7253eecb779142e92e3b708a2b167a7dddf93ae26cd92bb5c6c6","ssdeep":"384:r/UqdA5yNpXXTLLeT5RyFNPsJ1S+Cmna5WbYBQeU/pBr:r7o6TLLeT5kXk13Bbt/pF","tlshash":"a44209ceb549b47043c375e6c10f5249b236589de8088465ff25dcdbac38c7a01abf6a","size":12360,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.940886Z","times_seen":2327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3563804a757b4a2420c6f0dabd5585e","sha1":"5c631a212995ed3dfe87408bd094932ed5186ea3","sha256":"1b509b4535710e9d0ab3131a6a4e167adbf25edce520ab00248c35a99e669b23","sha512":"45059b73632300d9cc83f7c1cbd2911c9c3fcb681dfc06fea0ee32cd0dbe89a455a98c315f7c716264d519e3a2ee184d31668f6c2316e5b12fc02466c3830506","ssdeep":"1536:EdWjuJri/36ouUcb4meyLbJX9+rg+Scwp7petAQPlSGSFfq1k:E4juJu/qT4yLbv+r/KLQNV8fR","tlshash":"4ca328d67282b03053f786aba17fa316b2392918340d8420f17cdd6a395adc79177f6e","size":102075,"data":"","first_seen":"2025-11-06T11:41:58.504283Z","last_seen":"2025-11-10T08:26:44.534098Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/14217423/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-06-03T16:38:18.011678Z","times_seen":27600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.B0_QvnEW.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"bb2424b90285d46f921f699e7b3d17d5","sha1":"412e217bd4cfbafc553fc36b9094d0ece147a429","sha256":"2b1840010c419cf6839e4a18ffd0eec542b4c0d0c49ce5606bf93639afda5ff5","sha512":"f283f440d13fb69e25c115fd3e9dcab60cf937ed1ad964644f9719abba510e9f99ac82747ef2aba6991de08cbe10a8965c0d352c380dfa471d2b6753beba021f","ssdeep":"","tlshash":"a41100d93cc3d8b0d73bd4cc52a899e6d43c0e88a8fd41c0e4f86e853b155b18236ea8","size":886,"data":"","first_seen":"2025-11-05T08:48:35.692413Z","last_seen":"2026-02-25T11:20:48.331177Z","times_seen":7795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-06-03T16:38:28.814223Z","times_seen":28714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a01d722a75d4dc88964ae2913c1d200","sha1":"389cd83ac4b2cd414c693497d068d9cc62fa0d0b","sha256":"4fe29d501e036ff7572db50e889fc4a2d6a072e5ba07056f793bcec92fa86125","sha512":"09a1de9ca0c4553ddbcf07b2fa02e3bcc4be12c8a7e82f6aafaf7868e50bda4725e39dab50e1829bfd8eb88784de9090672498f96f7c4b688efb1528c5762d14","ssdeep":"","tlshash":"f4114400f6e8278467f330fd0637e4806b1b9407a10dce01f5ee38c40f8a7856a2364c","size":1008,"data":"","first_seen":"2024-12-14T00:56:22.244287Z","last_seen":"2026-05-10T03:21:35.840642Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f985284831a032cdb9e8c9aeb3b84a7","sha1":"e9944cca6e3745f38eaddb0ae463deca1fad135a","sha256":"a5c66436f8ffd0346b2b0580219206440adc04b005400c06a5b2b77e5b6bda81","sha512":"60777f826e4642fc5ac901f86835aabe3ba5885921dd714b3555b8a63f6fbe8beecb86d00bd86db24e2f0b6cd0dd148530ad726774a8760031d5d2b40d64fbc3","ssdeep":"","tlshash":"9cf0473199d01c1653d75e98f411575ee74bc05ece3f8588b86441d63fd9dcc6918a40","size":609,"data":"","first_seen":"2025-03-10T18:34:18.376999Z","last_seen":"2025-11-10T08:02:24.903152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d983a3b4f73ca4d3acb869636c9da4d","sha1":"a0c8910758f14053708daee02365df9727f2a699","sha256":"c6e13b1656c19c48a7cd2a6fc26cfa42cebbe9fe652bdb4c88b8360bb9d2fcb3","sha512":"e5532f403ff7ccc652fbcfeac565ae9e64cc84c9920be2a81b4da929760b9a6d1494a1d728c074e5129392809a57ef026183e43a66f658fd08b1efb0cb509e91","ssdeep":"","tlshash":"b90112b3c2960405812304baf29a471d3701950f87c7de55332e8ab2ffc69b222a0add","size":833,"data":"","first_seen":"2025-03-10T18:34:18.380296Z","last_seen":"2026-03-01T02:55:44.099576Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b855482ea9d8a6ff8d50209ef2da5dbe","sha1":"9d543fbfbe8d846f8c9e8616e3dfde3fb5269cd6","sha256":"cb500b1514e4b80eff008c1dc6e8d16a5287d42cea6625be94d6e5e8ac5480f4","sha512":"a0de84ca62ece00b57935502b23553f03150f4ad65315037f4360e5273c058a9c3fdf011ab307e64195f99dace961d499182a63f0c79da0f4b430ae027a940b7","ssdeep":"","tlshash":"def0e036b5ec6ca51122d0d051b77225de15a87b8dc35122e1d546d0813bb7486373cc","size":507,"data":"","first_seen":"2025-11-10T08:02:24.904701Z","last_seen":"2025-11-10T08:02:24.904701Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.CNndOvBo.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"166de4ba93d3ca600bc5d11f653cce08","sha1":"11cccb520d2c76aeff7083833cd17c44f5599c86","sha256":"c33f2e09e49ffe45ca9a394242988b8bb2ffb7c4cf0545e4f5501044600c8bdf","sha512":"4fa0b000e2f5588454888ff9416462534ef3510cab63dc32fd62e276928c73379e50ed5aa8a77fa398f5b95c5075dcdaee943aaf98bcddc3085b7bb209da50da","ssdeep":"3072:jeztTAWUNvLdCRS/3FIQmF57CgvVmgjfpbJzS3Mb27:ahPUNvBiSs1vVzjfpblSH","tlshash":"5a146cc4b186f53987e724e6487f1102f23d6d19784cc424fa99eeb63da418a9273f2d","size":193807,"data":"","first_seen":"2025-11-06T11:41:58.471065Z","last_seen":"2025-11-10T08:03:20.120801Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/animejs@3.2.2/lib/anime.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0606761895122abfbc5aedd28c47dd34","sha1":"66777f96e6015afef28dadcba835417b75447bcc","sha256":"b5ce1be3c3f530f192e0f2571d1942846096d66119cbada34bfdc912c4873f35","sha512":"42db6dfcbb009496df5d57cdb242c2f978a11d0dffb849e97f23437095d2682a4a37e3ce9d155fb4a73d2d2cfd64d01a8ef201fa74b7dc259c78bb8c79cee99d","ssdeep":"384:/CLZbIqdwjADnSVNRRJ8pB9seTOoIGb3b1Gps6U7XDUWTam:mZbIqPQD8p/IGb35czyL","tlshash":"8672c9cc32c2b047439396b2c56f144bb33e6d80646da890e629f1e93c3495d997bfad","size":17384,"data":"","first_seen":"2024-01-12T00:39:06Z","last_seen":"2026-06-03T17:27:51.497222Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.5/customer/action/get_configuration?organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026version=1345.0.1.152.462.119.4.1.4.1.4.27.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4f80fd286052f5aa81a7381bd846f13","sha1":"607e1371d2ebe011d747b5d2150b1fcdffec1aef","sha256":"a6594dcdfbfa3ce6fbf3c0c1704a753e35a4657fc62d9ba92d56ca4183098937","sha512":"d8d2da6a9d8fd1ab3db8cfdbb070ab0dc55c839aa4e6f31c29f403ffe9d1a5116aa1fdc1e607873e9d92d3fdc870003b0c4762ab1a01d4e3b94400253f904bf4","ssdeep":"192:cGsXGA8GwGBwU7NL++4zHda2D2+ce7bxK2:cGsXGA8GwGBwYNL+9zHdau2+ce7bxB","tlshash":"4ee1442a834bc8bbb373925662c7b60e742c4179b5f95d3fe460c770a1872c7d206d9a","size":7079,"data":"","first_seen":"2025-11-10T08:02:24.81089Z","last_seen":"2025-11-10T08:02:24.81089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","size":193,"data":"","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-04-09T10:49:40.045057Z","times_seen":23532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-06-03T16:38:17.878345Z","times_seen":29535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.BK5fA02d.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7fe2a8269cb714ddf2680633a19ebefa","sha1":"60ce7fa928a8e2835ffc1f1fe6abc7b653ac5047","sha256":"b346f9b10c26de88bf052c3311d754d310e07317e2bd58a1ba87199a095f68d6","sha512":"dad12adf43cadfbb8e41ed49ac47d6c19a8bb8e51c5a674b3308167ab35cd0b3ddc03e944a9ef39783a1d4e23cc435269867fc7be36b6df0a3ce37874a19b27b","ssdeep":"96:q5ziimCKAb2MLADeQA6Ob1NlTF3DM3maas1pFxRInNCzaNkQyyZFBXfFBXoQFddo:sziNA2CAHNgB3D6cu0NqaNkQP7BXtBXM","tlshash":"fba1c7bef365f97097ea8ce5e5143043ed3716a8b8ac85b0fa5c4e55214d2889122fa3","size":4900,"data":"","first_seen":"2025-11-06T11:41:58.466229Z","last_seen":"2025-11-10T08:03:20.105141Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ec17f8dd80a3833d46a158f4b026b4b","sha1":"cc64935380819e0226e7cd6ec15793e6026a6631","sha256":"1bbffe580a70fcf1e8f3a534a12ec971431e2024015327e803bd01d9e848cb3a","sha512":"8f7657319fd5bddf8e3a2087311efe3855361ddc01a1b8de81400447eb9a97b40d6e6043e7f527b7a565a7546e7156c8fec9a2449f2afd10b8665eb3ba6183d4","ssdeep":"384:4pNXgGKyuBg1zH1QYnCj2o3QYrq4s9ebLsSl4njojf9qhV6vR7U6oam3s2nlXMUC:4pJKyuaxHusebwjGFqj6pQc","tlshash":"1492d822f8e621347023d0ae57af964e62795207c10bc604bf5df3a38fd598b66772d8","size":19999,"data":"","first_seen":"2025-10-11T17:57:31.335178Z","last_seen":"2026-03-01T02:55:44.110589Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53cc039ef50c991128086c1af3f032fa","sha1":"d4a7904114a5cd0571966c697c2aafa64c9f62e7","sha256":"95170264546614ec0849c97f19bc1672eeadfa06496b5865b4d20a641ac82d75","sha512":"8914569592bff7565dcde45529517d4a5e508d4cb59744cc45e5cc3d16fe32466a76b89a8ab42484e0552f1838b5698fb55b1685deed02081d14cc6cbf4a94b7","ssdeep":"192:ZaBj0RpoSM/saqzrhdQJTA6S47KHZMqx12Qr:Zsjspo+csp1t","tlshash":"74f1a668b0e2113e657341ef73af49c4b100510bf84fc5983aaca61acf826c55b677ee","size":7632,"data":"","first_seen":"2025-10-11T17:57:31.337515Z","last_seen":"2026-03-01T02:55:44.11592Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb0d63199bcaa84da4ab124c86787bd0","sha1":"d9208c2a4a833b34c8790a7872663bfffd3b1d7f","sha256":"4349d33ea5db527183d1fac9d4b469a8a8bf2230d5da5af95a8d70cc6518bca3","sha512":"246e729c3250f33461938e1aedbfe71af0ffcf64c4da2a98cfd568f0146579125c5419290ced375789ba1045c0f32cf6a06603ff2b6e01e255befab8b7f902ee","ssdeep":"384:YyjjLRLuf8x3bYrHdgYHjOO/VNyVpTHojG4AD6oMzHwcBGUpY78:PluULiHmpOdWp7AG4ADQHZBGAYo","tlshash":"1882e731b07942347073d5de1aab814a6279b307e00bcb44b78c57e25fd755aab7329c","size":18442,"data":"","first_seen":"2025-10-11T17:57:31.338797Z","last_seen":"2026-03-01T02:55:44.118288Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/custom/floating_icons.min.js?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1f9706eeee7690ce0fb65264290a61d","sha1":"f47499adeca0a42d73894a8424a5dc65e1c8cde4","sha256":"afbf313c9cd8546932da922fcd36f00f9e0787370ac0d46ca82d3cb31d15d0ea","sha512":"99830735da3f51fcb6510a5f682638c2ded1a875790cdc5ed9eb928decf8d744a48e107d92af6db421b666a86cc88542c187c2d2a0c86535937143bbe898e15a","ssdeep":"","tlshash":"0f2186a083a6d43d83809166c37493097854302efe529640fdfc8a8b1ba9d4c6c23efa","size":1172,"data":"","first_seen":"2025-03-20T08:45:19.929797Z","last_seen":"2026-05-22T02:08:47.27492Z","times_seen":1766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc2060d1014cb060243834ab4ab256da","sha1":"32f7cfc7488f5cc7334bf35fb5b082d5d491657f","sha256":"4ba24b66a6a45bf3ce88a0bc2c37a08852406b25915f193b6c758a897ce5363b","sha512":"1ea78247e7582a3067cbdbf3791b08d03bb33d63ccae711abdedca89c335745e7f422ffc10f47da01515d07964c5272e8f3b914dfd782a4713286de2066f33d9","ssdeep":"192:wtvsst+aBjiyH5gou5M6lsaqzrhRZ9DgT5S4wSGs5ZIeIQAn:wtvs++sji85goudWsQeO","tlshash":"9e02d76870e2113a153341ef77af59c4b1049107f84bc8587aaca25acf92b895b737de","size":8972,"data":"","first_seen":"2025-11-10T08:02:24.910432Z","last_seen":"2025-11-10T08:02:24.910432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a870328150f5bb4ed5499b925abb7b16","sha1":"eea8d174c89aa577c165661069dc87da409c9b85","sha256":"bd6c251c175579762c81828a0e8fa26c77ef270521844cc7f85420f96b702a51","sha512":"12792064754a8663be5815bbe07e11b1d7088e4e8b43b1af8fc971ff810c3dab972e10acedc0efa81e20fe1b1f3ac02c4dd87dbcc6daa564cded4ed36d025382","ssdeep":"","tlshash":"c301bd89bc467076aa96322c713bfa07516216296844683359eec7bbef32d9b410368c","size":747,"data":"","first_seen":"2024-08-20T20:49:25.639102Z","last_seen":"2025-11-10T08:02:24.891492Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23797cea6e2cb394145015f561b2abf2","sha1":"464678f086ddc0f5cfe3adc10cfbaac4c4eff37e","sha256":"be393e413337f06366e3ec5988f49ea24b9ad6855f6482bdf321f160d4e2b875","sha512":"52ec0de6fd59bb8cc98921e456a0384c23fc5a0b6ef26191830ebbfee7d3c68af31718613e4226f77cc6e723405cfe57412568210d99869b13ec2ca7ce6be602","ssdeep":"","tlshash":"9ef0235d3c52b01737fd3574c3238a6f3391070131c35524da49cc342c644c60886c4d","size":446,"data":"","first_seen":"2025-11-10T08:02:24.912093Z","last_seen":"2025-11-10T08:02:24.912093Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.DeOPkGJv.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ee1af304696796b6cc8b349da18bd0f","sha1":"f4560c3c726ad0f0b5d160b6ea7453b2e2e56f14","sha256":"efdb2de47ce63d851c407a5f39fd274769ef284f707b40557bdeacf56c08755b","sha512":"1b1b14fc8ce596dc975c59227d132f687cb467027d8a6695a314ab6bd790180a9e7f4d743e32747806be17c769dc9c9ca31b73af1e477862331c9d9119fd07b3","ssdeep":"","tlshash":"52e095daa74039e7f6d5cde4c401e0e54af6239247e283b0d0de63728318031ca19a16","size":432,"data":"","first_seen":"2025-11-06T11:41:58.560649Z","last_seen":"2025-11-10T08:03:20.126006Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","size":236,"data":"","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-06-03T16:38:28.834806Z","times_seen":15973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.Diq_podX.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"51e7b16079bbfb264a63d31c89b92795","sha1":"d75d04d4f31a79ece0b7b0943a6d832722ad7870","sha256":"0e72b8f5f64f9310d68ff5486ae26eeba74e9b5fc399c71aa4d01900dbd92cfd","sha512":"21c1647affbf7cb9ace4027cec796d1ae70400048552f901292b25f4e640f17380ee62494f8204c490610e4982923ddc7b08a5ae800dc31c3f1e265828d98966","ssdeep":"384:KU5urbvY+4nmoHDpXlEmHx9pvV4xkT3pTnxSHI0WrD/j7PFHyJ:PurbvY9JpXlhHxrvV4+3pLxSovrD1HyJ","tlshash":"5c72c8c5f7aed93e53e7a4d17c682003fa785a84f02c91b4f3984d66719e884c173b26","size":17078,"data":"","first_seen":"2025-11-06T11:41:58.463996Z","last_seen":"2025-11-10T08:03:20.161649Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"javascriptURL","is_inline":false,"md5":"69165ebff8690c39998558705627e927","sha1":"b86888593992fa44c3d1fe1c665367cb214e5416","sha256":"0de7a49f6d21fbef846aba4bd271502d7ec9489bfbb3fd96f5ff7cf19140875e","sha512":"5ba1e5e8c8d56c3f9e73156c711a2a9e69dc86f53f47ce07bd59f79e9f8190e0a63a46c05270582b3afdc144f98d15622a902864c5635409e682c317640a2371","ssdeep":"","tlshash":"4250000030000000003000000c03c030000000000000000000003c003000f00000c000","size":8,"data":"","first_seen":"2023-04-10T23:38:56Z","last_seen":"2026-06-03T16:38:17.998329Z","times_seen":14114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16e698752e0b225e9d2ac6b1e6957132","sha1":"aa5cd929a65bb7a7a9b87a2d82005a8ec8a6da86","sha256":"dda392987edbd2b223f7b814d87f9bdcc640ae035576db0510b47be0440b047f","sha512":"951ac283078735a5da7af5f21d6a2a6962849f1ed01ed4a0b28e7a34fba92cf32c48d1671f954ec4a319a92cb158d6402949664eded4d2b34d4b1528833c3871","ssdeep":"","tlshash":"f3f0a35d3c57b15737fd7578c3338f7b3355070175835524ca45cc2468949865846d4d","size":445,"data":"","first_seen":"2025-11-10T08:02:24.913786Z","last_seen":"2025-11-10T08:02:24.913786Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a1d3da693289240c2b73acdb1bcbdff","sha1":"f3d217fb7ca7a1273f5d9daffd70b1775413b76e","sha256":"d6df147ae474219bd0e6816141a2ba029821c3d56f200889f86ea1f213cb366a","sha512":"8da1f5a38cdad665612bebe4c364bc04bed443b960ad8b3fbfec76b825b9e56e0e9c8cd94e6becef43dbe8afcddf7cf351704cd265895fdb7243de9f885d2168","ssdeep":"","tlshash":"89f0ab9d3c67b5673bfa3638c2238e6f33a617017583a524c646cc28686498a1897d8e","size":444,"data":"","first_seen":"2025-11-10T08:02:24.915449Z","last_seen":"2025-11-10T08:02:24.915449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"javascriptURL","is_inline":false,"md5":"69165ebff8690c39998558705627e927","sha1":"b86888593992fa44c3d1fe1c665367cb214e5416","sha256":"0de7a49f6d21fbef846aba4bd271502d7ec9489bfbb3fd96f5ff7cf19140875e","sha512":"5ba1e5e8c8d56c3f9e73156c711a2a9e69dc86f53f47ce07bd59f79e9f8190e0a63a46c05270582b3afdc144f98d15622a902864c5635409e682c317640a2371","ssdeep":"","tlshash":"4250000030000000003000000c03c030000000000000000000003c003000f00000c000","size":8,"data":"","first_seen":"2023-04-10T23:38:56Z","last_seen":"2026-06-03T16:38:17.998329Z","times_seen":14114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96b95675d099ade030e1708abcf80e3c","sha1":"069ec6fc899663ca0c04fe3f55a6935fa722780c","sha256":"db26eecc5a79c904b386328647dd3ea83f401a848cda90c46dc032973ab3508f","sha512":"1f3ac0c020c3f2098c135f404046e776d6abba9c384f9bf3541fb2517cc76a5425bd9300911358f1b85d0fd477359c71d6c0f4fdf15b7e1ccda9437e3bc0c876","ssdeep":"","tlshash":"aef0a35d3c56b0673bf97634c323df6f3355070175839524c645cc2478545861856d4e","size":444,"data":"","first_seen":"2025-11-10T08:02:24.916951Z","last_seen":"2025-11-10T08:02:24.916951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/jflickrfeed/jflickrfeed.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"847c6b884e569004695666dd6e90fd0d","sha1":"0f83977484c914c85ba813adb9c46506baf4a83a","sha256":"796951855984fed308feec350d31ea2ac1382b2c6aec06412f9c33e1c13fe075","sha512":"1dd14e40e94dde8ab70b5d2e0293cda5f91376703dcc2d2a4b3174ffe270663a0448377c7b8334f2195222e8e3bad39d58e27314f4a59b077a26b8085bed450f","ssdeep":"","tlshash":"623122005c51a1fe16ebb7766d9f13380f318301c868ea52a7e6c171687b1cbe573d40","size":1462,"data":"","first_seen":"2023-03-08T15:52:17Z","last_seen":"2026-06-03T16:38:17.983796Z","times_seen":2091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31b916501b15922ce68f205aa5733f03","sha1":"2ab88689eaea5a4528ffac0b284dec0fc0a57002","sha256":"f1be2d161cc50dd3732af8cf0981e65c5697de539652bede005464da1d5d768a","sha512":"fadb5988d0b7e374f5728d217b2023c3822aff05ac39f71cb982505e305884362a973f1e4a54906754ee434662d5cd278c9007b0a89ae777eeddeb114aec67a2","ssdeep":"","tlshash":"d1f0238c3c52b02337fd3535c2238b7f3761070175c39524ca06cc3478508860846c4d","size":445,"data":"","first_seen":"2025-11-10T08:02:24.918446Z","last_seen":"2025-11-10T08:02:24.918446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d980d60c54552a304b7968c2425b32fc","sha1":"6fbe16f688996449520f7c71b5670f2cda22c1f8","sha256":"37b02217bc740d4662ae7c7cf9d76abbed7fe253aef0eb884a1a8afd05eec36d","sha512":"b026b3ea173f7d30fd1c3a3ba365e0a233467788bf2b837eaa2a36524215044ef0052d09401dced8548e0135bfad2d055736a2529cc9d317a8eb54734db05d4b","ssdeep":"","tlshash":"cbf0a39d3c56b0573bf93538c2338e7f3355070175839524c645cc256854486189ad8d","size":445,"data":"","first_seen":"2025-11-10T08:02:24.919975Z","last_seen":"2025-11-10T08:02:24.919975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16887fb299ef9bf421e7ec4c41cd645c","sha1":"6f7fff695a93a9dd3f60b05cdb66e9a57ce6a9ef","sha256":"53a973cfeee49c348f21617258e692025d9bbf29fe05e212cbf3fac716bc3bf5","sha512":"294db454d46af872886cdefb4e86c33b2acae3a814340a8357331aeb02c3dabcb03fec39001605040566ec78e5a3115142aafb5ef31ef7c6375ceb4794a6cf6b","ssdeep":"","tlshash":"77f0238c3c56b06337f93638c2238a6f3351070036839528c605cc2868505c60886c8e","size":445,"data":"","first_seen":"2025-11-10T08:02:24.921485Z","last_seen":"2025-11-10T08:02:24.921485Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6df8d279502d8fbbd6f1cf7c845ee4ce","sha1":"5531492006e0fdc065758a78e98e7c77683ae693","sha256":"d9bd38cb35c0fd9dd1e70d25069cc1077b33cfd40998a19b664ab6e14c63b3b4","sha512":"a4492e34330da0987eb10747d80859cb1c80ce4e88ef196415a0bc91cbdc8afa9f299d7b2f1fa4ade5e88a0a30e64f916f18bee43be3911a873d9c80838efe9e","ssdeep":"","tlshash":"80f0a35d3c66b05737fd3674c3239f6f3396070175839524c646cc2468545865856d4e","size":444,"data":"","first_seen":"2025-11-10T08:02:24.922964Z","last_seen":"2025-11-10T08:02:24.922964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c86827337fc8ab40cb795a48c592ff36","sha1":"871563d52d48adbc1c4ceb0841f28ecb09f867d1","sha256":"fb9ddd2de1ff12c730943530e65df24a0544b6abd5fdc283323d3c0b5c9da469","sha512":"ad45458f483f47e73daa659fa5b4272e4f0819ee37a4f8d6598b48ca972d849f05fa596e4982844343578e227ef0537bbd54e3a2a9fad24e71f5631088d2e236","ssdeep":"","tlshash":"f2f0a35d3c96b06737f93639c223cb7f37a5070175835924c745cc2478545865846d8d","size":445,"data":"","first_seen":"2025-11-10T08:02:24.924402Z","last_seen":"2025-11-10T08:02:24.924402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfbbf55c388c65eab018c3e3b3d17286","sha1":"2f257b82f981cb87b2f98c95cb0b7bfae4d2f17d","sha256":"350cab31ef38faee8ff7f7aecd5674d101dec590b3f2f2f1d1f74f87666d08bb","sha512":"ad37e99f040eb0b4b7060f2df8ebd4d15ec0c2636371bb26556037d74edfdbd0b3136cdaf672fbaa7f29e5ecc294acd0f2192121afc510c8e18dba6213f83832","ssdeep":"","tlshash":"d1f0a35d3c56f46737f93638c327ce7b3355070175839524c646cc2569544861856d8d","size":444,"data":"","first_seen":"2025-11-10T08:02:24.925794Z","last_seen":"2025-11-10T08:02:24.925794Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50c34fb819ebc7ab0753548716d62722","sha1":"882f93c8c046aaef537e95ab43340a22f7b488da","sha256":"33b07c17afd0b7cd5afcbaecb9b10ca0956dcc8389f1e59f0e9008a6fda5cf24","sha512":"4daf6b8205d1dbd992799541d1c0fa0e04790d707fdf8e01c663cdd884b6f0771c5db517a28add5b1115fb17caa6d5933d5404e7ee896b91493fcc0b92dca29c","ssdeep":"","tlshash":"1bf0a35d3c56b16737fa3735c2238a7f3395070175835524ca45cc246864486589ad8d","size":445,"data":"","first_seen":"2025-11-10T08:02:24.927224Z","last_seen":"2025-11-10T08:02:24.927224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/text-rotator/jquery.simple-text-rotator.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9964685a5509aabd8ab04dc6257d97f5","sha1":"927c58db28fb33c328a5a0bab4f9e3a93555f651","sha256":"95df7f4d192968c5c68e43a936016ad025fac7ce02a221a1bf13be6592667c30","sha512":"f58116f313f5d862f6f561383d60e0cef0056bb77013b9060b60e3a2a225fb2d55cb5691da77b5cd76ca10f71929f1697b267bde4ee489352efa3475f58ed279","ssdeep":"","tlshash":"d171e34a68fb48bdce3a91eb83ee1f56247909b28c006441139b5b7e08f19456bdde63","size":3568,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-03T16:38:17.869284Z","times_seen":2085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2015fe4e8911558500fb094aac79383b","sha1":"2d1e5126c8e3386153082b98e841d7a03435d975","sha256":"bf2d2ce2803063fd72be8165d5fbbc700e24dfd6bfcb351f064367a90db9ef4e","sha512":"d6e3fb657e8dd62f942f2f59000ace81b36ce43ebcc8abda4018c1d73b155b3ce2e83d33dc1ac86cfe81b0d76100137197b905c1f87e9f2f194a4e2eac3013dd","ssdeep":"384:fD9HWD99TpJGd+iesmAnxpakrwHVXHh1p7l8dVNOpZpMOUROOHEAk:fDiAebALak0HVXHRl8dVNSpPUR1HEb","tlshash":"ab821ccd7253b11a8397707a607f420ef23a5899a8184850e059c9fcbe74de8427ff6e","size":18450,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.862089Z","times_seen":2328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/owl-carousel/owl.carousel.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fec2de7cc7d2d9a66130311f52b5db8","sha1":"5cfc389925bd8200ee1e0fb224434ded9cae3f15","sha256":"4b18105a346260a3e8359cd02633fd5f8bb244f2d5f43e4375a1efd10e5c865a","sha512":"2c65ad232d52605402fe3c61104ca6e19be96dd89eb072e8554c3019b549c1af260a6fd16ab7c007b4ddc24e9c0bec770aba5cc4d1cff2fb7a9a241699d8a04c","ssdeep":"384:XWxb9XXAhOfMSelTARgzoSC0Z4eAchzD/DM5F:8b9uTARgz5C0ZVDL2","tlshash":"1962183a2152321653b261af157c818213e548023ec7b464f9e6f8edebb6161117bbff","size":14916,"data":"","first_seen":"2023-03-07T01:34:34Z","last_seen":"2026-06-03T16:38:17.88082Z","times_seen":3610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/jquery.fixedheadertable.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"406edd97a8850446d2693ef306af0708","sha1":"bd4996afdab1f18893ef89c3281c55e6585f334e","sha256":"991994866beb5e90d2205f4c5d4a757ddd38c6399386335991b260a89d857fa1","sha512":"493f04e96c9ead6dd640cc2a8c53e4aa3b43171c7dd51a4eabfce9fbcf00c51fd9d2edb1be40e6dac6ab6f3850b53234f177bd232404ce70ff287c11735f7d8c","ssdeep":"192:J/PBMlQxEuOaOGWzw32xilOXrPN7pOIN+5Mfj9SPHwjwTuv0vS2QeON:JBMlQxEuOaOGWzGEZrPNdh05NPw+S2sN","tlshash":"9b227195b3f93192c5fb61ba59fe014db0214d37a74b44b0b1aec1b81e70d8d22b9e2d","size":10635,"data":"","first_seen":"2023-03-07T23:34:28Z","last_seen":"2026-06-03T16:38:17.927372Z","times_seen":2090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8677ff7e25bd6b630d37f5805e276fbb","sha1":"4eed0d9a7a5fe79488cb962ea3bb7268fc780a02","sha256":"2b89895a93016f760647cffad0f7bbc94372ee0e4014f991ede8cedf488d344a","sha512":"ab58e956de1187f27f5c9b68bfb17089aa8278602246ad57aa435c5b102e9e74c3a2353b6f71bd17539bcbfcc861d729a21a84937a45a2e9039493d147ebcc9c","ssdeep":"","tlshash":"b8f0ab9d3c66b06737f97638c2279e6f33a6174176839524c64acc2468648c61896d8e","size":444,"data":"","first_seen":"2025-11-10T08:02:24.928596Z","last_seen":"2025-11-10T08:02:24.928596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/liScroller/jquery.li-scroller.1.0.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"097d12ca6affd5151d1d56db876cc1e0","sha1":"4f1b6d162e327a5e8d0f37897d4d559dbc265ba7","sha256":"e00749ed99da6de8ee85c1fa969a7571feaba5a506c1dd88be8a12e20ed680d9","sha512":"fd4f03f1ba6fddb3bba25d32d09e9713d08b55fbd11330d43e74dd874646d01a27eb6dc19a49889cea10a09300adfaf1ee0a11921d6858255f31893fa8d8fdb2","ssdeep":"","tlshash":"05119e08eb0611bf0ce5e738fe3f9b1c75f315134222d5a495fae4541d814bb5270959","size":1002,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-03T16:38:17.957567Z","times_seen":2082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-03T16:41:22.357103Z","times_seen":164537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"508be33f72eaac1a45de41890ebb48c5","sha1":"6d0dfabe4fe9b2b0c4dbbda7dc246717239083c5","sha256":"361aee688b0b630b8dd7e874d6a3b3b6985d763ad82140f49753e334e7ade840","sha512":"200e6e4b5b4a1da156fa31d29d3e6e8bcf9d4b78d68f1b213efb7a47471168bbc0a9ed4911b3483830db5c0881e27be8947779f3893b169b8d6325fe16597e1b","ssdeep":"","tlshash":"82f0a35d3c56b06737f93574c3239f6b3365170175c35524d646cc3468548d65846d4d","size":446,"data":"","first_seen":"2025-11-10T08:02:24.930057Z","last_seen":"2025-11-10T08:02:24.930057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36fe9cc7427f8f8ce03ee8cfbf3ba580","sha1":"335d96520722d3a6aab88c6848054d8763a10662","sha256":"33011f5b4d4fe7401727ab62c5f5d81fc7701bb187dc03b563c97987afde7c02","sha512":"ae39430ae4678808471e602bab5f1eb91ead0191233a80ec0e61b8d2b05fe9b14504735c975927ce3e0a24826ef16e75113edd250ae848217aba2ead3f178e4a","ssdeep":"","tlshash":"15f0ab9d3c66b46737f93678c227ca6f37a607017683a924d646cc2468648ca189ad8e","size":445,"data":"","first_seen":"2025-11-10T08:02:24.931389Z","last_seen":"2025-11-10T08:02:24.931389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f661683ac42df5d05dfb5ef8cf89c044","sha1":"e82caa5657e77c0c20b40023be340172509fa6ca","sha256":"3d94bd4203813e9981b9e338c5d975a1a823aa5002146cbc8f301fe87959c800","sha512":"4120ddf2933be576d89c6b5ee386a0b61d83f5fa5e22f97f497c1339a3007a0b3287e6ddb30e4a2d572b9b1cc0a2a8743c3deac819749b2ddd50c8560252c9eb","ssdeep":"","tlshash":"dcf0a35d3c56f45737f93634c2239a6f3355070175835524c645cc6468545861847d4e","size":445,"data":"","first_seen":"2025-11-10T08:02:24.932602Z","last_seen":"2025-11-10T08:02:24.932602Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/auth/login.js?v=fqdznpgxv2jki2wxbnbz","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44707c412e847b9ae85fe0a7a0b1e81b","sha1":"14310992754c91b4e023f42ff1fefc94eed15568","sha256":"0f06109a3edc4b5015427cb22d029aa91a72acd32b71ce5079818fd6598241a6","sha512":"56f7269aac21348c0b6e9cef336b4450e65f257849b8d0c49598cb06438945c92d670af19fe073a3ee8869eb845827bb536d89e155ac3935d29b4e5a855bde33","ssdeep":"768:6MtYjbBIV+GgL4Wtdo1gJ+tvOx2RGwcgp:6sKbO+GgL4Wtdodtm6fd","tlshash":"92e2e88cf2c3f47907c3a16d401f9415f23ba454b5098898b75fcae2a9b598de123fb9","size":32695,"data":"","first_seen":"2025-04-15T10:15:48.996433Z","last_seen":"2026-02-27T00:39:20.459931Z","times_seen":1012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-03T16:54:50.164121Z","times_seen":337054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"894ae946c7c923e3aa1313f4fe45d88d","sha1":"f704276d4e22be57e153785fff108567aa138f31","sha256":"8eb2b2a9483594033177c6c1357996e5474309feee34a7badddf1cc32346c6ac","sha512":"f6400ba18017c0a4cc34bc31c96969b70359f23ac647c67cf2103845049359e6f656b242696242707b17f150bc079dc4a1412a3d30c471a9885b695cd0f17ddb","ssdeep":"","tlshash":"f4f0a39d3c56b46737f97634c2278faf3395170175c39528d646cc2468549861846d4e","size":444,"data":"","first_seen":"2025-11-10T08:02:24.933948Z","last_seen":"2025-11-10T08:02:24.933948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"258a642ef985b6cdfbc428316b6b88bc","sha1":"48260ce47468356f59c9deee33da96386d3aefe2","sha256":"13a0b8ab56c121fe850d2aa6bde7d822bffddf5999dece4bc834d6a57c0b2659","sha512":"f5d41c735bf24fd2ba1b0e98a344ce2ca042aaf0bc8791021982fc70b803ecf1ee3ee50df0782252da0ad52e66a9532cb2488b8d41b29d35b6f3b9115aa6ee57","ssdeep":"","tlshash":"12f0a39d3c66b06737f97534c7239b6f3356070175c39528c64acc2468549861886d4d","size":444,"data":"","first_seen":"2025-11-10T08:02:24.935438Z","last_seen":"2025-11-10T08:02:24.935438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eaeead0b6839b8b55c442850e7c035f4","sha1":"6d5b56197bc35e33f5eb17046035efea2703d852","sha256":"16e3fe9c2879d9d60d18acb9c5f334b3c24564346ca1d345f72b7f2860f1e5a6","sha512":"0c3194d5ae5d3317b959495cd549370146bf89c4870c74dd0f72143022b629f7d95f5bfdb09fe99ecb0f9977c075e0bf821d7db8725ea711b58f7f7d704dca3d","ssdeep":"","tlshash":"24f0234c3c52f02337fa3638c2238f6f3391070031839524c645cc2478504c60846c4e","size":445,"data":"","first_seen":"2025-11-10T08:02:24.937138Z","last_seen":"2025-11-10T08:02:24.937138Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/appear/jquery.appear.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbd164d0b2001df2ba85327fc6bab39","sha1":"13e083d8852729d2e6cfa3fbcf3955a28275fd00","sha256":"5d19547b40e94ab90e831bec03fc23d4b894894bb93006b3b3fd8d62e2f355ca","sha512":"5e667b534b3c4cd17e92d4404055e434be7bd07544354a2a1ba56947468799525dd86226e0f1f9d0015421941dcea765c566c1d6a8eec4e1106f2e9bf2064f7d","ssdeep":"","tlshash":"6031ff6b31db3a9556fb703fb61f73155221853b0251e052d9fadd7c39b2d42b803a44","size":1552,"data":"","first_seen":"2023-03-07T01:10:45Z","last_seen":"2026-06-03T16:38:17.898261Z","times_seen":2306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd706246e52849df349f5d9648629b7c","sha1":"5fbb5f699da7ebe672b82724fb09248c7f2b9627","sha256":"521245b2b40e23fe8e2e40fea014206e91a22d95f4eace7cf094294c9b788af9","sha512":"5d61fb7bc99eb0f7c03d680cb1e76694f2dd0d59069227543672a898a6475a9b42d7e3b9d393c3936646ac3f20f0d972eeef6c85608a30fe8d059816ad2a6c30","ssdeep":"","tlshash":"99f0a39d3c56f05737fe3938c2239a7f37960b0175835524ca56cd2478545861846d4e","size":445,"data":"","first_seen":"2025-11-10T08:02:24.938592Z","last_seen":"2025-11-10T08:02:24.938592Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e03acb84f0268629b7223c148ee3ee5","sha1":"6dd5faf5c1e5105f8d02cce175762f0689c0a393","sha256":"f6e41ccc4342697645425eb988b21679af0cb28f272fea7394b7c7d400c1827e","sha512":"eda1f580ca1845df94273d97f8436d62070f7e88861a3ff8493196bbc40693ec4d4eaf1c6bb3c552d56421a15d17c22dcfa5dabaa712e043bc07bc41eb48d884","ssdeep":"","tlshash":"e7f0234d3c52f01337fd3934c223ce6b3355070035835528c605cc3528544860846d8d","size":445,"data":"","first_seen":"2025-11-10T08:02:24.940571Z","last_seen":"2025-11-10T08:02:24.940571Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc8e0ebcc34973dffb3d4d0446e9ad91","sha1":"c86a2a821de63230b8584e0fbc9c098bad80b6cb","sha256":"158356aa59435d57e27796cc15b0ddf57c65f51b640a0060c69255dcb31956b5","sha512":"1838626af191bf8b2bcc9d66717d31386e8a40c433b4ba25628b20e25d247685b57a72d6a0f95b03d5e78de577fe79ff54c1070a1ec3673b9f34fa9852306365","ssdeep":"","tlshash":"f4f0235c3c62b05737f93634c2238a6f3355070131c35524ca05cc2438905860846c8f","size":445,"data":"","first_seen":"2025-11-10T08:02:24.887707Z","last_seen":"2025-11-10T08:02:24.887707Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4750ea51daa568f4189cb3912a79ecb6","sha1":"471029e47514bc2243f4199ea7481efba385ca40","sha256":"bb7779ccab24ab8e05192d7d2559b439b18321a0598babfe0016a00cf554006c","sha512":"2e6c08149fda214601bc6e4ebc7595dea4471c6f0c1777cdbc659d0e9ee2eeab79bc590a380e1d34c49b5936a443f65b5eeaea2f7a17dd5cb4d234a43496ab4a","ssdeep":"","tlshash":"ace0f16230c928123693005c84ed33d590661c37cfc79c82c1f121d11249b110c91206","size":386,"data":"","first_seen":"2025-11-10T08:02:24.942055Z","last_seen":"2025-11-10T08:02:24.942055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"15d3adb70f206f70e8676612cf1bcd06","sha1":"7d3bf3fa3e21e8fd36585901130714497e7bed20","sha256":"d29445e7ff17620113f644598826c7c3ddaaab631f9368add696a55e7c5a0b84","sha512":"cdda6a42b5f99b306952cb81b097712f8a32a48bc2ac6a79e6e1940f02e1d8f9f233bcbde623263db80cef1c89b4d5a53fc2fb2866439648fb3142e63d81bd30","ssdeep":"","tlshash":"1521c91d0b1e283885e7b13f568fe65a3832839308088cc0ba5e5ee04f2866c1d83fdc","size":1114,"data":"","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-06-03T16:38:18.009979Z","times_seen":1715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d566ae53ff0c685e42e6bc85bac947a8","sha1":"12849eb59097ccd3641c4c107206977878dfeb09","sha256":"0abd36d7dd6a2ef313875e29f8ccca0b432dff06db481717f8ebae073e3cc31a","sha512":"57ea5cec35c2767440fd048acd74eb6f2fbba493ea5f0e1d24b98db90fe1a8d3e594f8ed5e4492e91df9c935e6589c2b498f615e59d69162d3fe38ab539be60a","ssdeep":"","tlshash":"12f0276784a39486947ba42a8b5b77081961a9036406c802be8ca2a02f0403fd975fcc","size":445,"data":"","first_seen":"2025-11-10T08:02:24.944669Z","last_seen":"2025-11-10T08:02:24.944669Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fb1db1499b1dc02bb3caf46035bd71d","sha1":"c2288d9e5b722ec41bdc9a4e2001fc006a126e0b","sha256":"91c13469f6ba26112e411b3d5acb3c9b89e7f8287a8ddf7705daffeaeab0d2d7","sha512":"ce5427040f717a6d9af6f74b29ce76121f427985589e30ef230cd1757664a9f7fb2bdf602d19f53e0a7d7687d9a6db408d9bcb3c79d5a806e8b295d9dd4e776d","ssdeep":"","tlshash":"8bc09b14307244d1855f795d5b57de151023105750455211790c49467f9083b1e17f96","size":133,"data":"","first_seen":"2023-11-30T07:30:24Z","last_seen":"2026-06-03T16:38:18.013274Z","times_seen":1427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1e5930df35737baa08d8157e1babdce5","sha1":"cfdceee94cff984bd848fe1bcf37682c838efc06","sha256":"63e0d548dadb4168db8ecbf854de8fa26cf7428d7f85f5ecec8630d7ec14eede","sha512":"4bbaa8251299778304774992efc4d4aa650d3695c32602dc70caac6e080b3731c47ba33e22399b6436cd27bacb8bb66ec2550d62c278ba5769b30b2f2d246170","ssdeep":"192:TgG2WszNnQ9Ucnt+sa0onjLMMDON8WHj+i/LDHGNgGkPXpfy:3W3jLRO5+i/LKNgGkPXpfy","tlshash":"9fd1742f417123298027ed6c4bb477074178d8667d9e67e924136a19d7c7b8319e338b","size":6536,"data":"","first_seen":"2025-11-10T08:02:24.947193Z","last_seen":"2025-11-10T08:02:24.947193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-roulette.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-roulette.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5961\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:15 GMT\r\netag: \"674924a3-1749\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 78\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZAD6xFfinTW1mRZeTHHqi545cfJE0J%2FHQszotibjIK76wdJ1Dtw5dCV6yN6egMVfBAB3x0LO00mlPDvcwD2gZidB5%2Bd1uHbSMJOza7RfkdgxDKKruCV6frc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c40586ff9156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5961,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"4c00c62f6892b38be72ff21ba77bcd4f","sha1":"cd3e7855bd7252fca7ee624819769b219e62afa9","sha256":"df04e5456a26d89d36120c6078dadfb6e84b37b635c5b8f75a1ac75c27e1fc41","sha512":"b143dab0190dcd15de7220ee69def82732824d01f60d6428abf03d772b6440ec01d85bcbbed4d95209ea157d3781d892bb62502ba29f6624fa33c463ad78145b","ssdeep":"96:dGyZjfHeWJzRdWClke5tzFNN3CEBqm0SIlzE47ge6+u1qlTc/7jz7Gs:dGyZjNJldWClkM18fm031EhUczjz3","tlshash":"18c17e611b7d5036cdba10f1cb66b21abe0e5f8029c54eb54d3936499cecb7244f906f","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.095976Z","times_seen":1772,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/maybank.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/maybank.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3174\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-c66\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nGfbFk25xv8lyCwiMxxmEtanorc0jahlSImkfWDHNfARmeIuK0LhPa46H1akcPC9lUNtCobHA%2BhEdl0lnHqABsrkxge8BrUspiF3am6xobPGZLGfL7lt9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405871fbd56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 87 x 23, 8-bit/color RGBA, interlaced","md5":"9090309db1eed014753ae3b858b4084b","sha1":"a697395e709e693789bd82b2130b3c2ad3a4aa48","sha256":"09f4d88fdb291df0519ef0bf158f3308c71fe9a921e2cf11bf990bcf0b8380c0","sha512":"11f72d37a863239e5cf8f76b0c424681ca68676137fea4e88774bed3e0ed13230d3501ca94d065324cd34c8388ae6e9c96fb2b5c76090cab0f9851bd3287f654","ssdeep":"","tlshash":"53615c7ff9a54e908f1af3b125dd28b30b65c610b9e0fc45b9c9d06229641f065ccae3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:21:48.037425Z","times_seen":822,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/mandiri.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/mandiri.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1127\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-467\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BA96WN1xLRB1NKpISuMVD%2FfHiGsMFRfcue3lkAp%2BfDvnY7WYxyRFLuc1siHyzUyPjvrTQdn3uquwHSgRr%2FK7WuENnvICnt2Me%2BGLmppzrIVkF%2B56f7usm4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405872fd956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit colormap, non-interlaced","md5":"d6370af97aa7f285493a9aecb3e33a42","sha1":"9a52cc25ace828f731b8790593a2aef19a7b2d23","sha256":"5e829a18cd9f27940b0bcfd8cbdc4395f368de18d89fd96bf09fcd5cf267a58a","sha512":"6414efee3383e0689225b4f5a2225d2bf5f9c50e04d78ea286cea5710d549f8f7cc363eb533d0b61cfe5e4d48c58b8e21660d7ce0df49fa552a3f3233460269a","ssdeep":"","tlshash":"54219687b6e67cf895399912396a304a8f990511ac34d305078e670347f58d2bca73b6","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.084715Z","times_seen":1828,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOgUxPDVN8eszYLg2FeAzs1IEPIQ3r2HgR63WwSmnwaZf4VGyMy4xzuOEIN_ruPyFWjY6Qxa3DSR7m8wYUyhmq2RjC0q5ucDjpvqtOuyspjOn5K-q9-0Hc-LTTOQKdSbwcIZyqDZEWHv8MwAzpVW3giLFIutEBsyws77SiQul9jUNZ33xTNgRXDrz6dKU/s1600/microgaming.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiOgUxPDVN8eszYLg2FeAzs1IEPIQ3r2HgR63WwSmnwaZf4VGyMy4xzuOEIN_ruPyFWjY6Qxa3DSR7m8wYUyhmq2RjC0q5ucDjpvqtOuyspjOn5K-q9-0Hc-LTTOQKdSbwcIZyqDZEWHv8MwAzpVW3giLFIutEBsyws77SiQul9jUNZ33xTNgRXDrz6dKU/s1600/microgaming.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"microgaming.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 120054\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":120054,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 147","md5":"b9366d047441bc9bc1cf28648d48ac23","sha1":"ec64490e5adfac03a00cd337b24e3daf5df65a74","sha256":"227227e6b2997622bf3465200c87103e18fdcefd98884a2d7f14c54874db1ae8","sha512":"fd9be107fe8ddd182c45043602680926132f408947e066d563d0191dcb519c62e37d67300c8a21c83b4d256423f6732329af0a89db5728db5c1d7bfffc39d78f","ssdeep":"3072:jEgH5gmOxa+kNeZ8I4T4G10GE+RRfk+miCbFwlHxto:YgH+mOQNeZ8IC4G+GbIzFc8","tlshash":"86c312180e9cddc18a98a978fd16091222b81d98a7176f7b5c9efc66f14137bec1b01b","first_seen":"2025-03-10T18:34:18.326161Z","last_seen":"2026-01-06T14:19:09.72109Z","times_seen":3,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":378,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLpa6wF4yjAlCM0RvWz7VKMpydf_xkzHBFM934Hzh7ZncLNXaRasmOQH4raIeX3Yv3Eaca72W2CmhxZzOcWSYBnF6sQeElRaZ-TpnK4HErfitL_AVlR91fxmqNL_qo5szk5MPQ9bRakoOvOoij9r5KeK-fpyUZXEweEQVa4TG9QzD88_PGlLZIaIT42LU/s320/title-link.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjLpa6wF4yjAlCM0RvWz7VKMpydf_xkzHBFM934Hzh7ZncLNXaRasmOQH4raIeX3Yv3Eaca72W2CmhxZzOcWSYBnF6sQeElRaZ-TpnK4HErfitL_AVlR91fxmqNL_qo5szk5MPQ9bRakoOvOoij9r5KeK-fpyUZXEweEQVa4TG9QzD88_PGlLZIaIT42LU/s320/title-link.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51f\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"title-link.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 23864\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23864,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 68","md5":"f878fb213a1ecaffd71f40fb131ba658","sha1":"323ca762912604cbae4438ba92c4ef4e307ed20d","sha256":"510ecc45d6243b35a111a3b34a21ef037007cd98df84ad1394f3797ff8462761","sha512":"d02ec8ed7127cb344f4a1f8570f43e0327edeb7bcad3897ba9adfe8dd98999e4829faecd7cb846a5810428874fd8bf0839355871da060264ee5ffc2931f1c987","ssdeep":"384:xRTPsDogtC67+4QS+KYvo2DJ4Cz3U0gPVc4vuYNgYvWE8rhNah8JxMVRwHiUHHy:xRrynzCTKYvo2pz3UzZebEG8eMfHb","tlshash":"c5b2c067b2b3e525f20681b78b650e9dc489cfd041cd191aac7531e1fb0e76e71b1728","first_seen":"2025-03-10T18:34:18.361112Z","last_seen":"2025-11-10T08:02:24.649155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":432,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE7kWYLnsWIWl-NMImKFwv_5p5Vp6HVbFnNgklX5F_JyteLH_vKLAfxZXnqQrNh-fW1MzBNGh-T0FSDhxV1gqJ7xVJNREXH7HDtIFJ7DbnbJf4mLyqAWiQidt5sm-eOXfSnodXRm1w5A2GHcKlCJa2cxgn4iVaqI_cfz5uZm2LVI1GW9-agtkmSTjOspw/s1600/toto-macau-4.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjE7kWYLnsWIWl-NMImKFwv_5p5Vp6HVbFnNgklX5F_JyteLH_vKLAfxZXnqQrNh-fW1MzBNGh-T0FSDhxV1gqJ7xVJNREXH7HDtIFJ7DbnbJf4mLyqAWiQidt5sm-eOXfSnodXRm1w5A2GHcKlCJa2cxgn4iVaqI_cfz5uZm2LVI1GW9-agtkmSTjOspw/s1600/toto-macau-4.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vce\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"toto-macau-4.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 70921\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"60486c989821b3419c5da64178373fe0","sha1":"270abbc1e4f0d1d08c2c86313d6f5bab42b3b477","sha256":"dfcf375f009d6c8b136594c69a2e0ac7973da16f979d180c37080e70d4502128","sha512":"d2e15bc39f0662f462b8f1dbbe3ab21e7f6b2a86ef8df875f980520d214fc1dc76113fd11918cbbf902d035e05f21fc7c4a538a9961fda09bbf59cc802abdff0","ssdeep":"1536:+oS0OVjV3m+8y1kGrlHjuU8UA4/H+4xBWAKw1IO1D55IFi8rR6l:tijV34GrlDIy/e8WQJ1l5sR6l","tlshash":"2b6302629acb5dfff583ac83cdf6a882cc497d4d00b25156a541e0d4aae9ebe43c1313","first_seen":"2025-03-10T18:34:18.351638Z","last_seen":"2025-11-10T08:02:24.651983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":698,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/style.js?v=1.0","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/style.js?v=1.0 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-16de\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhzwCru1omQ4cbF4SdK5vRLs3QkZ%2Btpj4TatjffRBF%2FjWtX904OLR6RBiXcWxG8FksaYrionP37oSzVWrcnWuOTVg733OiQxME02Yw6CSCvc5Ol5LDIkmfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587985256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5854,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1126)","md5":"6174734545f4d0a24a22ae2f24526eaa","sha1":"969abdca32818ce8437a095b6c1e478d2bf70345","sha256":"d943adf3ed1dad80fb33a3380e56e5a584293f8d1694dbb6d5c5d1c6036ee406","sha512":"017d07cb8e391f853c7add6f7ecc503c09791b8a76a942bd51ecd55d203ab5d773bfdcc90b33f911ced9a4538f6d0e28f7141055449e2f9dfa29976b0cbfa955","ssdeep":"96:xEU393Bu563333G+3v+3tZYJWqr8xZMq038T4hfclwCBMkyZH:xEU393Bu56333R3m3s8xZMtMUhfewwMD","tlshash":"6ec1438ff251143505fb373a822f5b09af7f2a1a4945d124f0fb46a41f6c509a767e4c","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-03T16:38:17.869908Z","times_seen":2108,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/loader.gif","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/loader.gif HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/assets/css/azl/azl2.css?v=1762761616\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5517\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:17 GMT\r\netag: \"674924a5-158d\"\r\nexpires: Wed, 10 Dec 2025 08:01:24 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vO6YmGIMxBILw8L20m%2BpDppcQkZy4BRxmpk%2BRdw0P8vnTIBlxupNIlH7LwFv9RYP%2BnUpSq0x2jLNgMsp9mOa8CGsfz5LggON6dd%2FaVvYk5boc%2F8s7%2FXQ%2BBg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c4058dbe1356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 15","md5":"bc1bcccc4a3342d2063088deae7d17a3","sha1":"a1a988f912d3e17a908945750b91b508672ccac1","sha256":"a76090f2d604a7e9bd429900001b367ae94f52d749fd0f94706be887d87cce7f","sha512":"08c93c3506f083bfbe9ba6d7f9824f871ca145ed9bc431c248d3352a05cf23db90ae2f39bdefa532e8d16f29b623d3d91664753ee471fb606a2b082b6cf791c3","ssdeep":"48:0zXKn2kC7TYJJ3C+gXfU8wzXKn2kCdf4JJ3CUgPfU8GzXKn2kPJJ3CQgrfU84Wy6:K62K4fC62rSYfU62q0fI62oGfw620ifL","tlshash":"cfb1980de9d0bc05458de9c92de7d43a1b1108508ee8eeaaaccec8568a18077cd2d7df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.898935Z","times_seen":2281,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-W_m5ydidrne547_HS3ND16c1JpuELcyq6CgJCYmSFET4Oc2XUMfxPc9HQCWBcmjQkVoMJZnChyphenhyphen5Pg-B_ok6rrYKn17JW5K-Yxlbe3jbF87ZpyaMeMkFDaKPK6HewfMyZ3vM5y08L8OvUHJofFZ9mGY4FBpX-UG_G0JwD19lALF6Ds2k2iFwFlr-hQf4/s1600/billd.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEj-W_m5ydidrne547_HS3ND16c1JpuELcyq6CgJCYmSFET4Oc2XUMfxPc9HQCWBcmjQkVoMJZnChyphenhyphen5Pg-B_ok6rrYKn17JW5K-Yxlbe3jbF87ZpyaMeMkFDaKPK6HewfMyZ3vM5y08L8OvUHJofFZ9mGY4FBpX-UG_G0JwD19lALF6Ds2k2iFwFlr-hQf4/s1600/billd.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"billd.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 1221138\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1221138,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 269 x 132","md5":"06118ec572b50c54c37376e85584b273","sha1":"a382b429b5338a6dcaed5f5c5b10ff4aedb47b8c","sha256":"757a6026eabefaf875f5bf5f688fcdc8be05c9bcc53b6d73cfe4466a86b567fc","sha512":"1678e9c26238328bd42670c09d48d94c3ce9b57186f699eb2360acab12973c4c6bd7b292e27c9375a3b5a85574ca2460d8b3154277c5ef5e1a3b0b33adbe5621","ssdeep":"24576:PsxFcP3rS881y2FLNdFbETsHfzIaqqUQJR4X1A7qH:karSJ1y2txEg/zZUQP4XGeH","tlshash":"f42533bd452aa6d2f13339292c99e32791dd69254557f0a9d03e1822e0344efc8adff3","first_seen":"2025-11-10T08:02:24.657905Z","last_seen":"2026-01-06T14:19:09.798854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":386,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFwSYtQslL19ycJ_oM5FOk94g-Qs6aUzUo9NejpfZKhXtjMiRu2-FB-DJNoOe3KKhCSHQcLhtlZ-AMmJudDQnhvKCXGJ0jPtumWq8NsfcVCLfojtPqrXXNjowafNOMyN_y5H6hik220ftkdZYDXJmnFYyh8SCYBY64yE7SWeWzXZcrLvEwfXt56ovjohE/s1600/EMIRATES.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjFwSYtQslL19ycJ_oM5FOk94g-Qs6aUzUo9NejpfZKhXtjMiRu2-FB-DJNoOe3KKhCSHQcLhtlZ-AMmJudDQnhvKCXGJ0jPtumWq8NsfcVCLfojtPqrXXNjowafNOMyN_y5H6hik220ftkdZYDXJmnFYyh8SCYBY64yE7SWeWzXZcrLvEwfXt56ovjohE/s1600/EMIRATES.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"EMIRATES.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 57665\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"d13d6ec34e4779900bf9b9d020d9eb1d","sha1":"fed45af31eaed3acaf4554b31f497e15bb276ffb","sha256":"f7f66e0e5c50bf84bae8581de3c8e504e74f468379a639e47e64252c4828f2a5","sha512":"89339db00da11ffc94fd6d59bc81d34f5a52f48f89227e5d7381e79f92f868abb691eabd5ebaf65176a6340471409e2e73828b45810a4d71cf8d914242f6e835","ssdeep":"768:yfRB9PoX5MUVH0SFRbuL0YVdqo3hWg/ocj7+Hi0r4b7c69MhkLh3Pe39xHWIkO4:yXNUVH52vhZ/oXCwG7n2k1Y911kO4","tlshash":"8e43013c8bfc8dba29385eae160a278fb537d7e12370b54c2480d65910f8b80a7f5895","first_seen":"2025-03-10T18:34:18.361709Z","last_seen":"2025-11-10T08:02:24.661026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":667,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqSqfmX8CRl71-1q5AG7ElPHf2_0QQpqtDBsYSe5KexSgO3laiKUtxHS1zOygJr_ckxhyVG2NiBRtym-n3TgM97XoVtXGMPtxO7dN-T9-hkYrsHaoxz5dTf7GsJCPRwIjC6K0I2wlWACf1CRSmgUnwIq7SnhpVB5JJmXabisVqAaezD3MzjBvzK2FL7bQ/s1600/HONGKONG.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhqSqfmX8CRl71-1q5AG7ElPHf2_0QQpqtDBsYSe5KexSgO3laiKUtxHS1zOygJr_ckxhyVG2NiBRtym-n3TgM97XoVtXGMPtxO7dN-T9-hkYrsHaoxz5dTf7GsJCPRwIjC6K0I2wlWACf1CRSmgUnwIq7SnhpVB5JJmXabisVqAaezD3MzjBvzK2FL7bQ/s1600/HONGKONG.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"HONGKONG.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 69339\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"4b6050c57e004c1b6f0693a31b4fe757","sha1":"5cb01294caaa72bd773d68b14767fb0d24f0dde7","sha256":"95fa38862472d55b757f4dd8e2c5e13a791958825c4de4550bd811e6c9a37918","sha512":"a09c374564c3b6f2923990f117d1fcce7a7fc111542c55be1dba4e6643b37957ecc24aa4cb0810da4aa545e967f0b278d41a61d19bf24feb40c97967c4555b04","ssdeep":"1536:zdEYE9TTxzOC05DZPXa+Oh6bcEaTw38/69bV:5EYMfdI5Zfa3DT3/69bV","tlshash":"936302c55f7c4034ebea96c1ee11059ca6703c97dc276ec14b608bb3f16f4a3859e268","first_seen":"2025-03-10T18:34:18.289377Z","last_seen":"2025-11-10T08:02:24.663382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":705,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/nivo-lightbox/css/themes/default/default.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/css/themes/default/default.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-8de\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2skaj3hQiIqQT0tiihH0y38p03ZNIIh%2BqIHHb7ylirUemGH8g2wRSk0h4O1DFh6Yu4c%2Btsd%2BvwuoY0iLS4fcLVjrsxFGX4l8JCJOMfviwnc81aUilHtzFa0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853de156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2270,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2270), with no line terminators","md5":"951401cca4be1f9fca7ce0b7f26a7d8a","sha1":"2bf014557c6e054e32474fc0d4a69310bc2e4e6f","sha256":"bdb49593241ac3b4ffa1a72798effc086924f32ee7ae14c27002c9ff32600090","sha512":"9b9b90bd429be6d497ce871a4b581fc14fdcb38b439ce5f765e790992a2b50b1e2ad7acb1ad9e366bfbc48cce1bf108b9c58afce7f2be4e52b1e3522fe19e9ca","ssdeep":"","tlshash":"da41f23a7794a11ab1dfa0133114d7b51b5e488fbe10357b85aae9b3e9d30954c33a41","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-10T06:46:06.330187Z","times_seen":1262,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/bootstrap/bootstrap.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-7ba2\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rug2jJiy2RU7%2FLfnBAaOBLx4cbnsZk9OpRgVePfZwLvb1jfDmSNSp6CHBmBQRjn6LTecvKLsuIW2X2RMn0TUig0fulIy7%2B1fdJGQzwuR893tbsPnjqWvfhk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587782a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31650,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31650), with no line terminators","md5":"d08775b7d337d5f37e3fb102f1a8a913","sha1":"6cbd6f79def44d7e96d933a17967cd2afcf9ba3c","sha256":"8ae9a41def07afb4166b08e3143071437d1867e5f26e6bd907899a8b50bbafbb","sha512":"458415d96f8a83f130fdae57e3322c75b67269f4eb57494074e06b757eced0730c58ca73a8c65148c19b9126653ddcf66e3058426b921e1bd51c3b7369a5f05e","ssdeep":"768:poBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:qAr2MRCqc","tlshash":"b7e27446b230316107dfb2e5515f020b723a6a6dea06907c38b999f53db9c48727bf39","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.914513Z","times_seen":2433,"resource_available":true,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":883,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnyeav_mQuTrSQiIQcsuY4E6vb0bzpzoKuepXi-cLD4sxJZ2BUjuuZk1qoFnrHSIbItCmMfqFXFB_Yr5m0Nf0c7MIRWnzfmn-PKnv6L15W99dLC2r7zHHJlbbYukkZAH-cdLus7yLVD5DiGcIVWEtx4lqJrfQ2jGN3kCbQ85ElyM0LLb6-6E0hFrV4txI/s1600/filipina.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgnyeav_mQuTrSQiIQcsuY4E6vb0bzpzoKuepXi-cLD4sxJZ2BUjuuZk1qoFnrHSIbItCmMfqFXFB_Yr5m0Nf0c7MIRWnzfmn-PKnv6L15W99dLC2r7zHHJlbbYukkZAH-cdLus7yLVD5DiGcIVWEtx4lqJrfQ2jGN3kCbQ85ElyM0LLb6-6E0hFrV4txI/s1600/filipina.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51f\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"filipina.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 49989\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49989,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 120","md5":"55a700698d9da07546c826ebaf9da722","sha1":"40aebfe50f519d69c126cbbda064169ac74691d6","sha256":"8e8584dc83ad2dbb69b58bb6092805ede18b22bbe06dc3025ccd4c450e8d1956","sha512":"c719167c069cfc0917d2ef038e61a218c8f09453085a28dcc2bdbd64cf1f58ca7596db0d890ebe29efa28a16ee1e66b90b49c1e4107c0e6938095475ce3427ec","ssdeep":"768:7bON8shAHaSEg3fHWzjTaU12iy5b/Mc0pr0h1x5ktSra0SV6cAHs0rMTCTw8mlnp:7I8YpSp3aaU12910x684cZp0wJDln5T","tlshash":"d623f187a93d788ce06419063f5c241e89c95e74ce92f17e52edf2e1f9191ffa4da102","first_seen":"2025-03-10T18:34:18.197397Z","last_seen":"2025-11-10T08:02:24.666978Z","times_seen":2,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":107,"dns":4,"connect":22,"send":0,"wait":393,"receive":2,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/mobile/assets/img/loader.gif","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /mobile/assets/img/loader.gif HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5517\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\netag: \"6466f5b8-158d\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elYG2q0vWACy3l%2FVqNkNvkhwah2lBnOJdqX%2F7gqDso%2Bv%2FMhXux24ruil7g6pViIrHEb86w1SHx8pw21URYeMkXGuSLhx5mDJ8QHTcLnBRt%2BzTbdNhJdMDCc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405854df256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 15","md5":"bc1bcccc4a3342d2063088deae7d17a3","sha1":"a1a988f912d3e17a908945750b91b508672ccac1","sha256":"a76090f2d604a7e9bd429900001b367ae94f52d749fd0f94706be887d87cce7f","sha512":"08c93c3506f083bfbe9ba6d7f9824f871ca145ed9bc431c248d3352a05cf23db90ae2f39bdefa532e8d16f29b623d3d91664753ee471fb606a2b082b6cf791c3","ssdeep":"48:0zXKn2kC7TYJJ3C+gXfU8wzXKn2kCdf4JJ3CUgPfU8GzXKn2kPJJ3CQgrfU84Wy6:K62K4fC62rSYfU62q0fI62oGfw620ifL","tlshash":"cfb1980de9d0bc05458de9c92de7d43a1b1108508ee8eeaaaccec8568a18077cd2d7df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.898935Z","times_seen":2281,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-dice6.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-dice6.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5421\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\nage: 79\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\netag: \"674924a3-152d\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\nlast-modified: Fri, 29 Nov 2024 02:19:15 GMT\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISXfp1rlSr2GVI8s56BHg1g9QOqYkHgz4q%2FddsNog25SwwBRpp0v8y6%2FBAwNBw8mdWTyThKw9Wt6eOIyiwMXZfK%2FM%2BiBuDNRkVAfrmOm2w%2B1BY0t2JnnGzw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c40586df6b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"59818809868556332479b364aab8ea7f","sha1":"4027cbea0c7396fc1cb6dbc7b276392723cf8c9e","sha256":"d942e4f9b28cd8cfe2961f8a40919d77a8548e8341782c9c129bccfb87dee632","sha512":"ab2f3fd4af44c18594949d3e4b75578e6cd4a83ae7561adff6c4bd27619770ef89269119ad1d870102a4bac8bb30d4ca8d9e00f7a4473f10b6417678dd4ea86c","ssdeep":"96:M1R/idpPiPVliXwrGjUmubD4BZyzddkfAIwZG9wD/wqXt75P+s0ofnn+:g8/P+lO0G4mTZyzdSIIwZRzfXt1G","tlshash":"86b16ba06b45da1bffefe7330697cf00e7e48d6aac31871751bf520144bc5c45a86a18","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.155195Z","times_seen":1770,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-10T08:01:21.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSrHMbUfwXzN80FkeOPPBNA00Mm%2BLoEyKqEQE0rEmv3riYqNicPIvpkgo2HzcIT%2BsrS1dzUY20PNTyCKS6H%2BltztHubDy5xOecgbfH7%2FsDqRagHaQo9FJYY%2FRg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nage: 65\r\ncache-control: public, s-maxage=900\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-cache-hits: 22\r\nx-cacheable: 1\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=0,cfEdge;dur=27\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nset-cookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; HttpOnly; SameSite=Lax; Path=/; Expires=Tue, 11 Nov 2025 07:01:22 GMT\n__cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; HttpOnly; SameSite=None; Secure; Path=/; Domain=.5a2d1jp7lg.rudaltoto289.com; Expires=Mon, 10 Nov 2025 08:31:22 GMT\n_cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000; HttpOnly; SameSite=None; Secure; Path=/; Domain=.5a2d1jp7lg.rudaltoto289.com\r\ncf-ray: 99c405804d37b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":248668,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1980), with CRLF, LF line terminators","md5":"26fba8ce090ecb667358f93685478280","sha1":"d718f7acfd9643046a3a3fb83271293495efda3e","sha256":"284821aaaee9994dbe0b805a78f2d576bf4fa37cffbb4460e0571ab7d2473583","sha512":"b36beeebd1b24a02a52c3802413d1287325def3a2353d89b8406bfe0297a85b7fe8d799a3e978c70ebacbf5dc41513a819ae97734840e393910af536bb20fbf0","ssdeep":"6144:zGBbWBcDvsIGx0MFIIcZBCH1pck6Iap66FJA4gb2Rrr7HODCYLqQQRGX4OxNJ0Og:QNwj9/wD","tlshash":"2d341c72a8941016323382b5b773ab5dfb758103d7034658b7eca66b1ff19d58a23b8c","first_seen":"2025-11-10T08:02:24.669444Z","last_seen":"2025-11-10T08:02:24.669444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":50,"dns":30,"connect":1,"send":0,"wait":607,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/promotion/IDNTOTTOHK.jpg","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 02:33:07 GMT","end":"Tue, 06 Jan 2026 03:30:34 GMT"},"fingerprint":{"sha1":"FB:29:2E:91:22:56:62:7D:66:73:65:58:21:2F:D1:A5:A2:D2:53:7D","sha256":"02:B4:72:2F:DB:F5:39:85:FB:54:56:80:59:B6:75:C0:6A:9A:27:20:5C:B3:29:23:1D:DE:8D:0D:0E:44:54:69"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTTOHK.jpg HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTTOHK.jpg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2o2tqd5R9KbDco%2BgZfW6LrLdi2rbWxTUtD7VYabwWxkvXcGngmHC17ykPK1%2F%2FWW6K6yq25BzoLrBwt%2BAJ6lc2DRiwvsKdqInYmd%2BqMdd8w%3D%3D\"}]}\r\nage: 1040\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 99c405873d5556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88744,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":23,"dns":15,"connect":4,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-sicbo[dice].jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-sicbo[dice].jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6397\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\nage: 79\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\netag: \"674924a3-18fd\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\nlast-modified: Fri, 29 Nov 2024 02:19:15 GMT\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BSjGx00uKgVlnIneII3P2%2BBbjWPzRdyzf0CXcYAOS%2BsJMI2fhMpfYOzu85tqHCj%2F%2F169vDs4M1jZFfhDw1nnCSG%2FImPHlSzBj8UUfHMUZaSLI3SMUV4PVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405870fb656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6397,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 210x205, components 3","md5":"0ba7932557a2ef57f4a404c2e8cc89ca","sha1":"bdaee9aa983c86abc3b6e12d904263d9d020b8d1","sha256":"944e25293de1902e94503301ab274b4348c7d48828414eee613fdbfc614dd74c","sha512":"008d4ea19a9814894495373b9537293bc5ccb2e213657c7ee2122d09121b84456b64be8ee52216381a891bf561f023e4bb90e208561667eba3ae53d51d45d613","ssdeep":"192:U/jMXLdi8mVPcW4Aiycewb1WBZNXb592cQ:Ug7Q71Z4Am5ZWld0","tlshash":"b3d19e678ee8382beaa6463c19d45cf837a18ec31e64a590f6cd3d847877120c84729d","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.120772Z","times_seen":1774,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/jenius.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/jenius.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2310\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-906\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1E4Ry%2Fcj5pWwOFy07bm4i%2Byslqa204nmGJwh9v%2BwoX4nJrM%2BR87uJ4EDShBx0OpqTcG5IThbEJeoAZxzSYdIb5FopobjVcJCCE88pbHvfDc7LxJoOpeUgU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405871fbc56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2310,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 24, 8-bit/color RGBA, non-interlaced","md5":"e7248b9be9e6467dd95119449994d494","sha1":"558aea3f3b42a18f90e0b0f3239f783ce152ca51","sha256":"89b4591d94ce2999fe469c19693a27dc69211a41e55239dcc63400a65618c128","sha512":"7e6a4f8f677b836e0511e4fe35ef734b5b2e76f75626d0df540764d93e9980e10def9ec5ad1316d09a268665a835d3c0084792c722d63e40f6af34762d2a7977","ssdeep":"","tlshash":"7d414ba321bfcd5d532d422b0c7bf244308b86c2266086b3a097d2833d34a8dd89425a","first_seen":"2024-06-16T19:29:36Z","last_seen":"2026-06-01T18:08:58.73821Z","times_seen":446,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nset-cookie: __lc_cid=d5f70e2a-2bac-4136-a966-b24a5df5dd5c; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Wed, 10 Nov 2027 08:01:26 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=f4bf3281a4c6d58518d24582293ee3502c8db483109b07f9098f9d34bcb581d4ad1c726b840ffbde62d08395682f4b786abfa6e35ef8d66179fb860770e1; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Wed, 10 Nov 2027 08:01:26 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=d5f70e2a-2bac-4136-a966-b24a5df5dd5c; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Wed, 10 Nov 2027 08:01:26 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=f4bf3281a4c6d58518d24582293ee3502c8db483109b07f9098f9d34bcb581d4ad1c726b840ffbde62d08395682f4b786abfa6e35ef8d66179fb860770e1; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Wed, 10 Nov 2027 08:01:26 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1762761716\u0026tag=db136a6bf08c2d6c1d7686efd49fc7f88cb10553; Path=/; Expires=Mon, 10 Nov 2025 08:01:56 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7b153792e4fb71c400e7c3afb8d0c7a4","sha1":"8e584f0fef010bc26df04143fb6ec02a6fe03621","sha256":"efbbfc0fe8d7eae5a3eea8b80462016ad7d53f024b02517fb0c1012ccf6f2cd5","sha512":"01f0eaf9b2110934fb4b3398f514e5d1a9a0d2ba2d87784847114e9eea1c1622fd0fd991fd3604fe415e6ae895c3e5f0d835addea36cced3f2686d3f8c9897e5","ssdeep":"","tlshash":"2cd0228a818a28c604e82bcb1a8102493423683189800dcc48f6927d0a506a9330e2a0","first_seen":"2025-11-10T08:02:24.672403Z","last_seen":"2025-11-10T08:02:24.672403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daftartoto.co/img/rtpslot-rudaltoto.gif","fqdn":"daftartoto.co","domain":"daftartoto.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daftartoto.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 01:18:36 GMT","end":"Tue, 20 Jan 2026 02:15:13 GMT"},"fingerprint":{"sha1":"A9:7D:CD:60:91:DC:C5:17:65:B1:37:0D:31:82:FD:6D:51:3F:33:57","sha256":"7E:3F:B5:B3:6A:12:04:DD:7E:14:01:E4:0C:D1:EF:E2:51:38:D4:31:A9:F9:21:F2:24:04:6B:4E:E0:52:CF:F5"}}},"request":{"raw":"GET /img/rtpslot-rudaltoto.gif HTTP/1.1\r\nHost: daftartoto.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 380010\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Nov 2025 08:01:22 GMT\r\nlast-modified: Sat, 04 Jan 2025 02:11:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSVFEIMj4E3Dg7Vyo6n%2BCRHliTay3n3H3wNa8Olb0dIOUqdYqMAAonZx3I5qV%2B6JLUnajHBuDF%2BW2b6w7m1kBdzKSYf8e6265P4wXxA%3D\"}]}\r\ncf-ray: 99c405876f9b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":380010,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"a1aed15f9b79ba6f35603452a9240d53","sha1":"beb21c2a20028d32479827792c82c0c883da5e87","sha256":"4338ae456b29e8f1587fccc0ca013e3ca3a54c1638d1b1ccd8031e0bbfe5d915","sha512":"e0365c52956f192e18bc65ee415fb3b65e58b8cc18b7e057f571be6a156de54df98bd64362abd97b9c772a328b3908adb54b8a9db2e2f7d2394da0557c83b14c","ssdeep":"6144:0IspTKiMg9ncK9lDalqPJrKyXbcTKhYPARdwi8uREoOdA563TW4GJf40:mM2jTJDgnoJ8e7Oa5pH1Z","tlshash":"9d84232e33b90389b6ac7c3b148a588f9663945ab03d1fb6b80f47902b745f5dcd9a41","first_seen":"2025-03-10T18:34:18.23858Z","last_seen":"2026-05-28T19:34:50.894554Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLiR7BHbbrb6qqFUGOiyOYi9yN-ucH1a553rovlw_6NDQrSKOF4EOQrzN8OIEvnLgcOe4tI2fSbrUGB35oTiUpxs4JzNKrJ5EpvzQerHsImM7yZcco0ajv9EnAgON_6SPBT_Dr_DIZJyb5GLpjpIniuh7ug3mBCZCrzS93q_PxK-LJxSZyKgFgrs_5GKs/s1600/pgsoft.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhLiR7BHbbrb6qqFUGOiyOYi9yN-ucH1a553rovlw_6NDQrSKOF4EOQrzN8OIEvnLgcOe4tI2fSbrUGB35oTiUpxs4JzNKrJ5EpvzQerHsImM7yZcco0ajv9EnAgON_6SPBT_Dr_DIZJyb5GLpjpIniuh7ug3mBCZCrzS93q_PxK-LJxSZyKgFgrs_5GKs/s1600/pgsoft.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"pgsoft.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 111635\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111635,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 147","md5":"3d2093faed62bf9437eed37e1415c0e9","sha1":"ae6c7a228f5f8b629c0c618103ee9b8dbb00cf45","sha256":"5d61093d225f40c5cfca48fa4233650915cfa5f33d6b41d3700a8d6c91ebffe7","sha512":"9ae1761e7beea2489ca25494028c71806dea77d0f83178336ea5fc82bed1c2449dfaff065ee5d3c4385b73a385284c110a88d358d52cb820c01c9ff3e5ff2b9c","ssdeep":"3072:Nz34TJgx8LS7YOWsqiR1etvO7uzcRlawBkxzN:VqSySE9LNvOimawBmZ","tlshash":"45b302d6dc0ad00359abd33d1c960efd6910efc3c484b764e41cbb49475ea227969ab3","first_seen":"2025-03-10T18:34:18.270646Z","last_seen":"2026-01-06T14:19:09.810852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":404,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxQgyzBbyqhiay6V98j61H_2r1KBpZJTuKHzrp369I3jvtZtdZwPFM45-Ops_m1qZjdke_mV5JekRmSYnADCb7TLcxM-9qqs6sxjIvi9t6U1zPenD0kr1acGI7yQxFspxWkoQEOta_UvqOSN1X8o8KkWm45JNJr3eqTlbvzKpg6KksBoC2C-EuIUn9nbI/s1600/ovo-online.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjxQgyzBbyqhiay6V98j61H_2r1KBpZJTuKHzrp369I3jvtZtdZwPFM45-Ops_m1qZjdke_mV5JekRmSYnADCb7TLcxM-9qqs6sxjIvi9t6U1zPenD0kr1acGI7yQxFspxWkoQEOta_UvqOSN1X8o8KkWm45JNJr3eqTlbvzKpg6KksBoC2C-EuIUn9nbI/s1600/ovo-online.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v13f\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"ovo-online.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 8623\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8623,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 145 x 87","md5":"1debc27661e689f9cc9f85754a643972","sha1":"513bbd97f260aad9194fe571947aefea18184aad","sha256":"e222b3a0716b9647ddbaccae7ae79a7667eae2b4e400a4971a29577d7c3c9c31","sha512":"2ad49d7937457b5521b74333cfc27ae8753317b5225b0632dfc78272c8a95d93aa13fc420c5c53d2c44cd5b9b1654163fba661cd5a3f5f4417a27f4d6d415675","ssdeep":"192:S7Fq04tVv7LD1tXbSV1t1kX3xAtI+nT+stdJq:So0EVv7LjeV1e3xAtIcVQ","tlshash":"e002a058fdc3e5a4cd55f1eb20ccb4af875de09864311492de6e9c399d06ee920062df","first_seen":"2024-08-19T20:59:40.102243Z","last_seen":"2025-11-10T08:02:24.676534Z","times_seen":4,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":614,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY-DMXc1JeP7LPMpM5nXHJhO-TvKmP7BsJ49ck5J-jTY4jZoyF9Fc70RxmN47OJ2yP1Ms9MrBj59Zf9o8kYLAm5UDk7nYJHMJxBsYdOrf5i0g2aMEavkXks3iYykJ2Rq6iMuaQ93fD_HgX-GTzgwJlo4bZPmol2uOdc2YUcRRkYKuCn-00ghyKNTe_Nvc/s1600/NUSANTARA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjY-DMXc1JeP7LPMpM5nXHJhO-TvKmP7BsJ49ck5J-jTY4jZoyF9Fc70RxmN47OJ2yP1Ms9MrBj59Zf9o8kYLAm5UDk7nYJHMJxBsYdOrf5i0g2aMEavkXks3iYykJ2Rq6iMuaQ93fD_HgX-GTzgwJlo4bZPmol2uOdc2YUcRRkYKuCn-00ghyKNTe_Nvc/s1600/NUSANTARA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"NUSANTARA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 67249\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"97c60a9d1a3df64ef205d9dfbb75526e","sha1":"58967fbc47986089eac330d50035e767d62f993e","sha256":"cf4d44c8d2d9aa91247b7a0fea39892f3b29d6110e68e06c16129cf9a5f5cc0d","sha512":"fd6801b326ad0bb317289794e6476c1fe8ad6b47b0665304e91248093069d870175e22a03e7d6b3b6e4708b5f98ffb73b638a21797a1b8301145fd3c23c7b444","ssdeep":"1536:F8aZcNEhStjcHQPbJnhK2Py+IxQc7o3fiCv0hGClIlq:yaOEYmQPbBhm+I/FVIlq","tlshash":"f66302c423e261c39beb8e378a535678943efdd78c9089f495458728b94ca833c547bb","first_seen":"2025-03-10T18:34:18.317381Z","last_seen":"2025-11-10T08:02:24.679325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":661,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/bni.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/bni.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1242\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-4da\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FGXx2OfrxkiEUnVzGJmZc9V1pV4kKYef8BFUT3CXgGLPNF31dWF1iqtNIXw1tMrkEfTPH7vtj4lgZmZY%2BN7nRfLYz%2FpYWEkWOCKNhia419Ge%2FdHv91nv9c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405872fcb56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 24, 8-bit colormap, non-interlaced","md5":"f4d6f0960f58c75167c9add1bba9ab55","sha1":"6a1f672e0cb1261eb33ca01cddd7a4ec4342529a","sha256":"50afebd206f7b1ef8fcf1d4dff496412a08518bc068319f97465908441cd4041","sha512":"ae764a25ef0050c0385dcc6b87239553e855d534c0026c81f0aba82072c1d81a19f79ac2abc517fffe5824234e075bb975703369cdd9f717bf1d5e7c5ecf7cc7","ssdeep":"","tlshash":"5a21ea8df0f40f1236917ef772ae5cdadca866b93db42b341253d5249904ab081d3367","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.096573Z","times_seen":1832,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-24d.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-24d.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5662\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\nage: 79\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\netag: \"674924a2-161e\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HPiqU6ZhtF5eNqp1ygHhCRgdUOlQemKsIiDtP3N1g%2Bo3WbaUwWX3LUfvEeN1BJ7noQiiyW25891vswuSTmF%2FOomVlrKMj0ATx97jO%2B67P4gJtBqCWH9zMzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c40586ff8e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5662,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"68f536efd4d9cf08d6edcaf5ca4d7ced","sha1":"a4771384bf6e12cc4737cf2f3bbabe27aa503e09","sha256":"df5bfec8fd98e9195fb9f02960c1f2a06deb9f024dd04801a45b772feffbf5dd","sha512":"60e03089e2e87368b1af8e759e5f197b542388b0aa760d51f24a244504450dd4f94ec1c3b4a628eec42437b5000ce0caf7eb5de0af362bc5f495d60c7ed929f3","ssdeep":"96:I1BKRCSc/BDLJv3QNwNpaW/5aPmDS0wZtTWnBS7Ow3OhwFWBtoDxzD6M:9U5D9vANwf0sS06tqnk7bYPBto9yM","tlshash":"6ac15b2eb458bb0fcde8d6334aa9f584bc1d9d980752ab672c504899bb58877a887200","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.115006Z","times_seen":1803,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaWe8e-WtLWiQ1Tww5cCUa0HPYNaS2ZKvCoPdvthqnADopJlgEL153j28kq3GrjmIq-VmY2eKUwlZXo13MfW9clKSZ48rOPXcVFlUtaMFmolC-ezIQ1f8Jf74fGEKhp8Sctvw2kI3jYbQs03vuDjcsq4u7lcqAiocdlALQHOG6sLx1-Ozg-2wkI5ThPTQ/s320/title-casino.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjaWe8e-WtLWiQ1Tww5cCUa0HPYNaS2ZKvCoPdvthqnADopJlgEL153j28kq3GrjmIq-VmY2eKUwlZXo13MfW9clKSZ48rOPXcVFlUtaMFmolC-ezIQ1f8Jf74fGEKhp8Sctvw2kI3jYbQs03vuDjcsq4u7lcqAiocdlALQHOG6sLx1-Ozg-2wkI5ThPTQ/s320/title-casino.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"title-casino.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 20982\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20982,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 72","md5":"e1c68c1ac95e76f8677c05d63b4796d6","sha1":"24fc2241381a97a37f79a96e3165a240539c8e2e","sha256":"3b9754966b5a1744a23575effe7916d693f1030399c00d36ab287d4dd0c9adc9","sha512":"26f8beab33077a3a28bafec3db857d45f4d70b71861bf505c71924c13f9fc6c030ccb93f3452b5891025a6f8133cc984ddf41859910dc1d8ae062706d74a5f71","ssdeep":"384:ZGabOY3paiUdbSfvMRJ+Ei821/iEWVHpJUTWBKeSo1teUSpIvQHxHHy:dOViPfvMRoEAWZUTWBKevxSpE","tlshash":"2d92bec2e61291e2e62812719ad15c8feac81e7ca55790d2ce247fd5aa3f36f3d81341","first_seen":"2025-03-10T18:34:18.346573Z","last_seen":"2025-11-10T08:02:24.682712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":416,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/7m8l7TlFO-S3VkhHuR0at9Ih4imgI8P11RFo6YPCPC0.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v15/7m8l7TlFO-S3VkhHuR0at9Ih4imgI8P11RFo6YPCPC0.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28548\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 16:45:58 GMT\r\nexpires: Fri, 06 Nov 2026 16:45:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 314126\r\nlast-modified: Wed, 14 Jan 2015 22:48:57 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28548,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28548, version 1.1","md5":"1c2236df616e20bd4894a174fb2d5225","sha1":"c6e64be68b173f9d89afd3510f6f57d42296d981","sha256":"dbba47796ddefcfa1570846cfb0787d2871d1db17db1b8ed5c821ceea061b489","sha512":"3e81edb83849eb3ad9045c450880ce3cf59db8469d63d3c8d6a8ebb3ab691087bfd147f9023440405af996c35e4f0392bf0fc8d9dd85b0b7524cd8d4f340739d","ssdeep":"768:RfXipjanPRICmNfAeAlIHbIp6i/Ww23zlK4qO0UJP:RfXipjGPSN8lIVw23zlK4qO0Ul","tlshash":"63d2f1af26412c03ce771df5cbb492612b1eee15da3d91eb9d9438279b0a4c860243f6","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.893346Z","times_seen":1761,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":166,"dns":2,"connect":14,"send":0,"wait":15,"receive":3,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5Kpa-lE3x09ZdslC2CbLQ1O0_W8SpDZXGY9JeDZPNABhfzFHyJGRtDI4_fY7tMWxF1iElAbxqjRoOS7XkYwnwlHbS9vncxoCbqYVroEnUay3xTpMfOTwwcx8ZWwN7WmoLM0H37DzPqbrhQmIT-QZ4k8jKLKOZ76HhRV2Js1SU3163bZ93CgQglIZxAxs/s1600/JAPAN.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEj5Kpa-lE3x09ZdslC2CbLQ1O0_W8SpDZXGY9JeDZPNABhfzFHyJGRtDI4_fY7tMWxF1iElAbxqjRoOS7XkYwnwlHbS9vncxoCbqYVroEnUay3xTpMfOTwwcx8ZWwN7WmoLM0H37DzPqbrhQmIT-QZ4k8jKLKOZ76HhRV2Js1SU3163bZ93CgQglIZxAxs/s1600/JAPAN.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcb\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"JAPAN.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 56389\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"7e35827651d038491cc3101b8dc5f43d","sha1":"285f4a23a4ca59da274d28e1c4af8ea105da617f","sha256":"f86ddf6b03b9ef49bda1ad695d5c7067fe8edfad915748bdf28e3ca25ae1b88d","sha512":"cd092cfafbdedad6514aac7ed51d6622599de859a26d000915124baf96ec0566e98dd16daa2a8991f1f5b61b107c29f214a372b9dac7219ed21c4e6f8479306f","ssdeep":"1536:IIYKOnD3ppFzA2SK6fDjzWf5eDviwpKwimvfzCEuTaq:lnOnnhA2GrHWf5ejiAKwimHzvSaq","tlshash":"a34302b5dee153783749d41d02ce1ab19c94ca262b37d06178ef46621bee21f1112eb2","first_seen":"2025-03-10T18:34:18.271794Z","last_seen":"2025-11-10T08:02:24.684748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":622,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/text-rotator/css/simpletextrotator.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/text-rotator/css/simpletextrotator.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-b3f\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOaagTdfU4c1UTVTdW%2BcQAN6WfmZbFQcX%2FSHgyBDm4t6rwguVQMwuZu0QbI1HAxXeYjDlgibpxdOrZBNRCMr7%2Fmq7PpusnEsRUpu9%2Bhy3%2FBjZYycUmXoCzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853dbe56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2879), with no line terminators","md5":"8123083f5ecbef7842b43e487d06207f","sha1":"6ed548348f7049edcf10594f3e84533c272a64aa","sha256":"e58260e204b97def3d0cb7c8f11c0ddb7e2255eb43f20c05cd9578dd3b6a31d9","sha512":"ef1a2993a0bdbae6f156b05110f77e1e7a72cd1ef37270b5cbe33919b184f5e8079870c45fd9498c9e1c26e3468676aabf61d34cba4bb0e1d0879929980e3d52","ssdeep":"","tlshash":"ac51c7b65c91918c892a8e08d7dd1f650a2dd3b218221c9e7307270b5ec7eaf53ec767","first_seen":"2023-10-16T02:59:58Z","last_seen":"2026-02-27T00:39:20.325851Z","times_seen":1272,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi347aqNC2HZWhrvfqptJZd-7wQfOlZYbXhooGp7h_HBeNxrgMI83J7FxeM0NggHaRfmKuDq0AcNbp_uVTbqkPhv7CGmKwpi-kMJteLLLofNpc_XGMADD4vu3K07_RZfOtg288VWCULa5fgrtfk0I_6IkWygOTc1wX55ky3TmTIY7tWgNjGhax-LbsrENQ/s1600/SYDNEY.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEi347aqNC2HZWhrvfqptJZd-7wQfOlZYbXhooGp7h_HBeNxrgMI83J7FxeM0NggHaRfmKuDq0AcNbp_uVTbqkPhv7CGmKwpi-kMJteLLLofNpc_XGMADD4vu3K07_RZfOtg288VWCULa5fgrtfk0I_6IkWygOTc1wX55ky3TmTIY7tWgNjGhax-LbsrENQ/s1600/SYDNEY.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcf\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"SYDNEY.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 75882\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"44df08805e9e713dc84d857f7b7c2a2c","sha1":"520ece92ce647fdc69be0709fc271672a6ea5589","sha256":"b25a7a464f5f9abaaf063b2fb2ce9483e9d4431fdf9a6508a053b6226397a2f4","sha512":"c5b5d73dea5525df63ec8ab5a95797d67c86de2782d878c7b62b23aafa7b1069aec123571a10e03bfed1bd49e3e0bf81de9156e7a360e2b4a3455e1f3e05481f","ssdeep":"1536:0h9LMlqk3fnr1hprA/T6d0T0bvjK3xt7z2rSlzktAkYY:mkjBcYbvKtPakzEAM","tlshash":"b37302c9518cf4b188b731bb55de8c3146c1dd9838fa12f2e3cf989e854f6268d18b26","first_seen":"2025-03-10T18:34:18.230975Z","last_seen":"2025-11-10T08:02:24.686457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":611,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/skrollr/skrollr.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/skrollr/skrollr.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-3048\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqmvgKbhH8rBV3ugt4mL%2F34klLWiqg%2BOPxUPCyvUXm1zPL5vq1qo9EiD0xcLtEBEFRkx%2BwTXU5g%2FLAQp8ToYHBsy9cMLAdWVekRrxr7e6AlqlIEsd7OCqd4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587782b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12360), with no line terminators","md5":"7d6ae9201bf4c1d83ebcacc6da3ec09b","sha1":"65b20f0c1dba10c7ba3d644fba7ae80ae08d4ced","sha256":"911dccc7a59863b46d628fdac57d96a7cbf72325fe2555d2a3d165c6258d3464","sha512":"023903172cf7ec0d5fb06f0ed9dbe90146ff5b2ddb8bf5db81f9587078d28d2c9cd22808acee7253eecb779142e92e3b708a2b167a7dddf93ae26cd92bb5c6c6","ssdeep":"384:r/UqdA5yNpXXTLLeT5RyFNPsJ1S+Cmna5WbYBQeU/pBr:r7o6TLLeT5kXk13Bbt/pF","tlshash":"a44209ceb549b47043c375e6c10f5249b236589de8088465ff25dcdbac38c7a01abf6a","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.940886Z","times_seen":2327,"resource_available":true,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":883,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/tweet-js/jquery.tweet.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/tweet-js/jquery.tweet.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-2011\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6c0OspdbrA0JGDENHDkTEhFSYMOVwRvPq6r3WBB9ZVBdrLiSyVzK%2Fyfq7TXs3jPyqbcKD4Hr%2FymgK39k6CdLWvyPsI9tUrASeC54VSCPhSarYK%2FNlyvKvtU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587883656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8209,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8199), with no line terminators","md5":"e6d5a5f7a0d7af2a2c63b97919cac65a","sha1":"1f61ee273e334ebd7388e219157bf8654482f009","sha256":"431cff4d223f3296f7d4b543573271745a91d9069a3666844fb3b037aad844c7","sha512":"a8b64bfe5a39d6b58e1d5b9d1864ffb0e87be8e164a0cf71a39fcbad5c4a81fb4ad400dc6416e6a970265d3804954809949678bcc639fb10f763767777ac6922","ssdeep":"192:7IXczrVLA8Tmk+a5m21yVTp5Czsa5qdmzVQjBIxbFDyZ1ewMOVrkxmtUtkwR:PAOjXsa5wmiP1utkwR","tlshash":"63029370f196503b0ae32272b91b6390b73dca4bc5d5dd53c37594482fa5f96a232ac3","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.987235Z","times_seen":2325,"resource_available":true,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1000,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXes98OMJIfYEC2cUIDCK61b3499_is0Av3XcM9lcCVL_E1fKvdxpI6RdhE57ukCWb_c19OXbCaJbH3v20mrqSWhm03NFl1cLKLPBa_xZdtcAcCgSQaSPiyOMJk9WyNlGrp9G1-aumXg3fprTfuy-kApoz2Akncn5mpKpyOxtBlwKydxcHd07eG6hqxvQ/s1600/gmw.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjXes98OMJIfYEC2cUIDCK61b3499_is0Av3XcM9lcCVL_E1fKvdxpI6RdhE57ukCWb_c19OXbCaJbH3v20mrqSWhm03NFl1cLKLPBa_xZdtcAcCgSQaSPiyOMJk9WyNlGrp9G1-aumXg3fprTfuy-kApoz2Akncn5mpKpyOxtBlwKydxcHd07eG6hqxvQ/s1600/gmw.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"gmw.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 109363\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109363,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 147","md5":"e72ab1f8f6842d188261e215a8aa505c","sha1":"e6217b3c5b6691b6d9d24a741b7ac8819ee62b83","sha256":"265797b20784475ef4a2f2a15517a8cbe5ddc689d12ad42c836615b545b5e9b8","sha512":"c8c650ff22c61bfd916dd5e09c73c95ec8fe7b80d0fb019b763a7a813ecea5b3bdc2d072c5bc92e598e5ddaabffd0401a5b60763baf54cb59ad9c82e2d4618f6","ssdeep":"3072:eSY5+j1K+odcgoeIDswFCvYGynY0t/tWKwd4BI:eNwBgo76YGIY0tg9WBI","tlshash":"c3b3120d19129cc403b3fb5f563e9a86b87e38030cc9425ba88ebdb6925065db5e96f4","first_seen":"2025-03-10T18:34:18.266554Z","last_seen":"2026-01-06T14:19:09.828608Z","times_seen":3,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":403,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/nobubank.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/nobubank.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 142686\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-22d5e\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsWZ91qqWyGE0CYeJ%2BVXd2DD0qUpztM7ssfyY8QqXHf81Bw9XIK3nSTvRDT1%2BP5NzxSW%2BT4JeaTfYFGUVzk3EDZFVAINUCRXdzMFwtCFWO5khZuU7kb6d%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405873ff156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 593, 8-bit/color RGBA, non-interlaced","md5":"45e0371c9d7209bd16569f7cf37763ea","sha1":"8aacdb6b4ba962a2c0e008cde6635cd10c8c5230","sha256":"aa3e1d4a75b58f81409587f73ecc4f5138b53b07ed67abc307db35a4cd0be48d","sha512":"a1cd19793054c62bab4968392dea4140337396cf6938bb62274b406d9480032eb96e65150974f702d18d40d5cc6cfd1893abf297cfb70fb5be541502abba7d12","ssdeep":"3072:2wsLy/PT83Ym9elI71Gf7jt2FPfC7fopnYozB+sn+P:2L6T1mKIKG67ApY0fna","tlshash":"a0d3137ac1f7e2d0fc2fcc7c1d29b32564ac202e85429478727fa931e61459434e2eea","first_seen":"2025-03-10T01:18:36.685967Z","last_seen":"2026-05-31T07:43:47.669007Z","times_seen":114,"resource_available":false,"data":null}},"time_used":1321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Nov 2025 13:01:20 GMT\r\nexpires: Thu, 05 Nov 2026 13:01:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414004\r\nlast-modified: Wed, 14 Jan 2015 22:46:57 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26528,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26528, version 1.1","md5":"b20e0cef1fd0ee15a5fc0d150d4c9672","sha1":"7bef9051bf8ecdf269228c6e743dad5a8172aea7","sha256":"47a6d754139b198b90326c9ad8c22bd5e2ba5e2d7e2eeb443deed603255a611a","sha512":"cce8eb93332e18c5d4897c004ea1241f012cfa17da4f05ce87b3246e56274f9d561a4c2b49bada58f1d5d1d8f17db5a448e4bee78c0d8e3dd9a5047442d05b4a","ssdeep":"768:+fXipTa5SqjK1O4v/B7ddk/IxEjeRUVC8cy5zIQaqK7nP:+fXipTwf8/xc/20lcbP","tlshash":"e4c2e05f1bd2984df671483cc2bf5aa9f18053eb13ea7a745f925a1c22a15d50a032e3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.919115Z","times_seen":2200,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":112,"dns":1,"connect":7,"send":0,"wait":10,"receive":8,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/97uahxiqZRoncBaCEI3aWz8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v15/97uahxiqZRoncBaCEI3aWz8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 15:10:02 GMT\r\nexpires: Fri, 06 Nov 2026 15:10:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 319882\r\nlast-modified: Wed, 14 Jan 2015 22:48:52 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26572,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26572, version 1.1","md5":"845280fbf7cf0ca7e186e0b68356ae0b","sha1":"3e37848e9b9052cdad47a551d55bebd4cef073b6","sha256":"d729f0522993e04c4463a7ebd01694ad369f6efd78681f270d98afba78aeafaf","sha512":"8d79528c1ec8464544b19df1416690213e25843f817ffac7e996a2ca1dd586980fb7f98fcdd30fd0b0618650caa41696be0a9191ca9093eaf951a201d1793c2e","ssdeep":"768:2SgKX9C7dZgS7QTcHOhQvFnH5yTSDlTzRnmLF:2SgV7QTcHeQvJXR2","tlshash":"40c2e111b56d6308d4e4a7346d0f153e8bdb8e96e1ebeba7d1224e6182479ca8ccc374","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.991683Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":13,"receive":10,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLi11Mvtb0F9k3s3J3N8UuUpBM519ZC9LgRJ7dlex9r8i-7kNl-Ul8XFq-vkaRGjTCtPH1HbeDvc2ks-bdtX29-ZKDrFMJWtodTcgUZpG4Sx-4JUdGzvrMFDWrUUwY3toJATSeNwjn54LkCnKBPRzDuhzi5vSepHfUckJNxRL2gjkNrSqtCoRUrEDAgRwsQvVCjZbRyFTLRNyDmT1a1boZV","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiLi11Mvtb0F9k3s3J3N8UuUpBM519ZC9LgRJ7dlex9r8i-7kNl-Ul8XFq-vkaRGjTCtPH1HbeDvc2ks-bdtX29-ZKDrFMJWtodTcgUZpG4Sx-4JUdGzvrMFDWrUUwY3toJATSeNwjn54LkCnKBPRzDuhzi5vSepHfUckJNxRL2gjkNrSqtCoRUrEDAgRwsQvVCjZbRyFTLRNyDmT1a1boZV HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nlocation: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLi11Mvtb0F9k3s3J3N8UuUpBM519ZC9LgRJ7dlex9r8i-7kNl-Ul8XFq-vkaRGjTCtPH1HbeDvc2ks-bdtX29-ZKDrFMJWtodTcgUZpG4Sx-4JUdGzvrMFDWrUUwY3toJATSeNwjn54LkCnKBPRzDuhzi5vSepHfUckJNxRL2gjkNrSqtCoRUrEDAgRwsQvVCjZbRyFTLRNyDmT1a1boZV/\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9jJVxhRyzF4RoNWKoUAfMMEIi9Py4kO9TebuE_Nc27Stv54paJk92wnPDRAwoxkJ647tYkJXzA_Ap5F1x0SEKJ2jQsP47Tw5tfN-BqUCgHj9QAUuhs_Oi_dmNfwCiYLeP5u1QLBeKlZDUAtZdGcVYKM-E99hvw9FQMIpe6qm7X-IebHTk4MS4Z3tOfXo/s1600/AOMORI.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEi9jJVxhRyzF4RoNWKoUAfMMEIi9Py4kO9TebuE_Nc27Stv54paJk92wnPDRAwoxkJ647tYkJXzA_Ap5F1x0SEKJ2jQsP47Tw5tfN-BqUCgHj9QAUuhs_Oi_dmNfwCiYLeP5u1QLBeKlZDUAtZdGcVYKM-E99hvw9FQMIpe6qm7X-IebHTk4MS4Z3tOfXo/s1600/AOMORI.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vca\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"AOMORI.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 64104\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8fc1dde44c987608e6fc3dfc35bae10a","sha1":"c517a98edbc137c48865bc8f8ed88b8a9a7d81ff","sha256":"5cdcd0d903bb57ddeadcc593a26af2688a66b21f011b957c0535aa50709411be","sha512":"9464afd1aed1784b99932e8a7ef5268599d5cd53f4210fb894731defdbda1eb97dd2c18b3ebff265ce4738d45211321c179a77713c602c146eea8a06f0d4ba48","ssdeep":"1536:Q4WBGoaGfYKas2Eubvx3pxebefE9y33NT3rROaM0a:G+GYKGEQ5giOONT3rRW0a","tlshash":"1853013373eca8b914f58f1fd0dfbca6d762bdb00547abe01a9687abb113150583a491","first_seen":"2025-03-10T18:34:18.356352Z","last_seen":"2025-11-10T08:02:24.691938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":711,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHBOOmd-EnE4plcXXEjl8cknkEfo6n5G4rutQchf0y1hPk0B_FntjwKEGZa-XzF7WjWaU20gd_NvM6s8zYXjeWEDLllCF74zqQ6NkxA6XfAsA1276XOql_2gUuXuxlrp01Zx1H60AqbQeuW2Y1V6XzKtm3VfGJRSVjf4tlMcMsBM85E7HNDVWDBY6TGCk/s1600/MIAMI.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhHBOOmd-EnE4plcXXEjl8cknkEfo6n5G4rutQchf0y1hPk0B_FntjwKEGZa-XzF7WjWaU20gd_NvM6s8zYXjeWEDLllCF74zqQ6NkxA6XfAsA1276XOql_2gUuXuxlrp01Zx1H60AqbQeuW2Y1V6XzKtm3VfGJRSVjf4tlMcMsBM85E7HNDVWDBY6TGCk/s1600/MIAMI.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"MIAMI.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 62880\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"1bcff8c9efb8db48e337ed96ee54c4e7","sha1":"dbc54db45bab16209fd46fda0f0783a84e199c26","sha256":"445ce7628ecc02a0f260ee77725e01189ddbe634cf35d047d71177590ad4059b","sha512":"b2e993eef2a3f9913fcce19f37c5224d723eb919b073ccd2e5e20e9395ef3ee35c25fbdf75b421c0ec95a43fc8a81f6ac2836978f4c8e9522321e377edd7b18a","ssdeep":"768:J4an3TSmgR+p0FOJHI4b53lfmCCLf7kQVHKO/tMVlMaxk8UQgnYBbkKLP45iGFhd:J13eLQGY5VikgHntv8BkwGFfs6d","tlshash":"0a53018f51e12cdc40feeb3218d669e020f510c9a6a47685182258f866cfbf625b0fe9","first_seen":"2025-03-10T18:34:18.246206Z","last_seen":"2025-11-10T08:02:24.692547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":702,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/vbulletin_md5.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /js/vbulletin_md5.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-1639\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Acu3hqKv7A8hgntAtJX1nlL9L1X4uKyMFTg1h2TbpXVegdkByefMLqXKg76mZyK7MQoPp2pFaVlmLi7zflnKxtgYoy3Z2qgIbyphnM52eU46jdyzdey5oSM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405854def56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2780)","md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-06-03T16:38:17.866867Z","times_seen":2135,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/seabank.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/seabank.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1487\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-5cf\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLHiajn3EbFvB2jwfACJek1anbMGp8%2B7sLYH0MDWSiFd6Yt1clqkflIfxGrXQN7hgOcNyYtJ%2B7IGpw93IBEJiz%2BLO1PiR3Bz7be1xSgPeVioP9PNVJSgz2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405873fea56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 42, 8-bit colormap, non-interlaced","md5":"a4ea5e627732180b9f7c4d1ae6c28d25","sha1":"675d858d52a0a67253fbf10b80388b5807258026","sha256":"ff37442401121b3907208d7085ff13bec864479e93a4e157e40d2c1abba65f44","sha512":"2c268fd2376de90c280dcba69c69ed48bfadee564a44d4a728527e37b090b283476b437280396fee51c2674c92fc4fbacc42d25903842fc0bb76c1b6598de665","ssdeep":"","tlshash":"ce31c9a390b9a5d60558a2e00cda0536f11cef1fc0e01b95615d18be6cb45e7cdfc850","first_seen":"2024-04-27T15:45:17Z","last_seen":"2026-06-03T14:38:23.065326Z","times_seen":994,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvTZtRzgf8HWSKYzC2sE5ar9kEzKXohn98hyffAoFNAfwnrt4rb1h-AI9HMbITxg1OinDbNJYHb1xFv8fiq9VeLnksiwnP8dnRuqLeXej95VIQkmCovx7hVfnPdE0q_5gz3WROcnFhQwqO9kUuhj-wKfJaBO073OxUpuvfi3Ogeaw_33Td40Oiji2WE6U/s1600/rtpslot-rudaltoto.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjvTZtRzgf8HWSKYzC2sE5ar9kEzKXohn98hyffAoFNAfwnrt4rb1h-AI9HMbITxg1OinDbNJYHb1xFv8fiq9VeLnksiwnP8dnRuqLeXej95VIQkmCovx7hVfnPdE0q_5gz3WROcnFhQwqO9kUuhj-wKfJaBO073OxUpuvfi3Ogeaw_33Td40Oiji2WE6U/s1600/rtpslot-rudaltoto.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v8c\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"rtpslot-rudaltoto.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 12653\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 154, 8-bit/color RGBA, non-interlaced","md5":"9ab252e47ae99affcbd66bea115a4beb","sha1":"8dbc6e4c0b50adc825a131b3df66d59d58678c5a","sha256":"99b64780b29a94b9b98fed8215effb45c5f23ac2a030d13fdc237cd53e80b26e","sha512":"8ef51474cb1954b2b3164d4f8d51571c950f9e5c8f31b9370fb66b80f6d4659877a1d089670d351a07f486ead1655d8bd1a78142c175cceaf875d140e045a642","ssdeep":"192:nik0sFdM72107C0wu9NSX+I2tBNaTZGQ3CRK6NhPmo+FfcNHGrHD4708+1qlwsQ:niA6bwIm2tBS3z6zPm7lcNgM708RK","tlshash":"9942bf9bfd85883547ab86210adce9c8317735d69d34eca854213c6c93efac721237e6","first_seen":"2025-03-10T18:34:18.298033Z","last_seen":"2025-11-10T08:02:24.694323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":708,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6Hi7FLWADG42twQx9NxSFUdKbtMg1rolTm6uDIH5O9jtic5tfNwSu04zKcqxWe8HxvH1oIgKkRR0BS8y1r3yB1j-LnxpWvtgo5yIULDXaONT9-i_0Yv09L65FIY-6QbsSJF7MDtUaJBDrGv4ol9oBkjPETrp_pFIKDXgR9-70RmHaw_J-G4UAQw-4FQU/s1600/bigo-3menit.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEi6Hi7FLWADG42twQx9NxSFUdKbtMg1rolTm6uDIH5O9jtic5tfNwSu04zKcqxWe8HxvH1oIgKkRR0BS8y1r3yB1j-LnxpWvtgo5yIULDXaONT9-i_0Yv09L65FIY-6QbsSJF7MDtUaJBDrGv4ol9oBkjPETrp_pFIKDXgR9-70RmHaw_J-G4UAQw-4FQU/s1600/bigo-3menit.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v11a\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"bigo-3menit.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 9224\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 207 x 135, 8-bit/color RGBA, non-interlaced","md5":"3f997f76c1df4b7640fec6089394130e","sha1":"4991cde644e9ca8da577401ca16c83b98fd26adb","sha256":"f4cb5d827ecda9a8b5577dff122d38d98e033d04e1eff145417321210c488127","sha512":"b18747ba6953f705981fda808c7423fbbf3b1afeffeebd12179c00b898618349b7362771391d9972484b0991e0772f7301deeb2ea74ab07a1671475abcc5da4b","ssdeep":"192:kw82tONp9jdr2B5a07/6s4/RXlnMQbbQy:altjhia0LanbMy","tlshash":"7d12c0d5615ee592111e3cefe5f026fb97c53404b3afe558b221e7a7197eca8101120e","first_seen":"2025-03-18T23:20:18.878378Z","last_seen":"2026-03-01T02:55:43.983458Z","times_seen":11,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":319,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUYLE7es3baIyYKGe0mAXFg5ME8gVyeuV6AQWYUh6HDgPm52wXDNiak4ikg4iDwK1MHCnm9gFD7yMxd8M3ZpoZCqic1eXTuQxCuymu2FjXzx50C2ZNYLbJNAet2vhOc7vyC70zpCFI7mukWhwwHRa1JedHdrNWGnawEgC8hwbd_RjPgnPaeUbqjjO7PW4/s1600/MONGOLIA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhUYLE7es3baIyYKGe0mAXFg5ME8gVyeuV6AQWYUh6HDgPm52wXDNiak4ikg4iDwK1MHCnm9gFD7yMxd8M3ZpoZCqic1eXTuQxCuymu2FjXzx50C2ZNYLbJNAet2vhOc7vyC70zpCFI7mukWhwwHRa1JedHdrNWGnawEgC8hwbd_RjPgnPaeUbqjjO7PW4/s1600/MONGOLIA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vca\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"MONGOLIA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 60312\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"ea554a4ae9639100cd292d40e84f7305","sha1":"c693055d9382ecec13bd9875f73046b3e5a6f10a","sha256":"4d4c0cf7dd6f7db9ae71cbc15219cec5523e68c9fc5597bf8e2c3385f6209f8d","sha512":"116b9b484002ea1b292b9d305b969815b3bf155df560cf1ab26c229e2f9846f92c1257967b97240f86c79fe2ff91fc9208ce3fb38c3367627539736c55f5ce66","ssdeep":"1536:tJI/mXr+63vdAc0ASkj90Y+7X9XuQfXUv5onHIvflEn8VKao:tJI/Or+Kvem2PNXnUhuoHlEnt","tlshash":"3c4312b0ef2daebd545de3e0a917c453090ecb56ea2b21f3d03294a5bf949d8ac00647","first_seen":"2025-03-10T18:34:18.263908Z","last_seen":"2025-11-10T08:02:24.696274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":668,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-24dspin.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-24dspin.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5339\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\nage: 79\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\netag: \"674924a2-14db\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLtPRadRFfabpOlVsXgJZoQdgpnAiRPhJleWr3LG0VEKcXqHyuo6ysEJkokmrYicpIH0oY2uBgoq4fZUTJmxPar1w0A4iZqPBAxy6yRPAILVBvJYHbUxM6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c40586df6856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5339,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"97ce6779ea88d190219b696fdd95ad7c","sha1":"14d912aeee43d9c6cebaac1f3c59ea97f7fd364b","sha256":"bb33c75ebfea05c8a890cf324caa643447aff6ccc845cf1b6877d9d0ed214a61","sha512":"f51db55d747f74d9b831a82beb843775ae8a4b6c61c966e0b5366bdfbd65a76267e3a510075d50e8592561a63e92cd39e9908da7e305cf9810b22b9851b12276","ssdeep":"96:Ht193sZq+nJ+b1FVDlxInCZwQy1RUchyAT1CiIGuaXf126FJUQKbSbSbj:Ht193un0xHInT7U+yA1h3uaXfc6jgmmX","tlshash":"17b16bdee1ad8199f07944f849e0b1a85f1459370ee008f68abd0eb60c1a66fc1642db","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.104Z","times_seen":1809,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/danamon.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/danamon.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 897\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-381\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D066dIChMvP%2FH4BzrDtbRsddiuAbbp4EZVCqGmK405HhXxIFRyeVVs6Dp2gUzlHZ5hRFLKcG1wInbqWrRQr0hLQHQShiBTFCfuyLNuqu9X0fnF%2BFxbdwyqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405870fba56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":897,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 21, 8-bit colormap, non-interlaced","md5":"09c3d58d1975cda982b351344ed43da1","sha1":"83c6e4c954bd431779cbc478472e3931c65f204e","sha256":"3e911cbcd7f001af49b046d34bb7cc40c9b2e3ff280d0da498641c99a6509dfe","sha512":"c1b780aba1e8a03e333a7e35bf08a4c2037a1b6989ce86831243bcc1d4d0f8c9eae6fc8430f540de41a90f2ad6b4da91eca2cbe3902d0e0e05d6f06d287c63cd","ssdeep":"","tlshash":"a811b7f69c11381c64d1f9d3302fc26ca53d12521ab1874bd7972cbaee2f6800054270","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:21:47.803578Z","times_seen":1222,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rudaltoto11.com/","fqdn":"rudaltoto11.com","domain":"rudaltoto11.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-10T08:01:21.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto11.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 12:29:25 GMT","end":"Thu, 22 Jan 2026 13:25:59 GMT"},"fingerprint":{"sha1":"DE:49:B6:77:B4:90:5B:72:25:F4:B5:64:A3:4A:D2:78:E6:4A:61:0C","sha256":"57:70:01:82:0E:C3:DB:1B:74:FD:EF:DF:13:5A:CF:F4:E7:86:9E:EE:D6:90:BC:ED:0A:64:5E:48:B6:B3:62:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rudaltoto11.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 10 Nov 2025 08:01:21 GMT\r\ncontent-type: text/html\r\nlocation: https://5a2d1jp7lg.rudaltoto289.com/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Blr3hwUY%2Fthf8RIxDc6diwWmIQYaXK8cq9riFssNn96kLv7UQKsY3sGhdECV94Stis6S6Ma0dhhKjA%2B2ywpP9QrDoFJz5ZeBdJmOAjMuvA%3D%3D\"}]}\r\ncf-ray: 99c4057bde2723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248668,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":35,"dns":8,"connect":1,"send":0,"wait":648,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/owl-carousel/css/owl.theme.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.theme.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-460\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frdg2%2F5s4mwKFj89tZr5BzAIPHU4EFCJRjMtho53G6LS8WUhxO8T%2B8Z85M4Q%2FabA%2F8jiyhqLtZltOe7A%2FqpNDT0f%2BRoRsOSCkkpO%2FH2mpbLjX4AwA0CNLeI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853ddd56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1120,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1120), with no line terminators","md5":"fbef52f73346a99cc02bdfd70904191b","sha1":"9a738af7e107f52c59c0bad2d7e8ae9c548b38f4","sha256":"f0a11eb1d8fabf95360258de73cf1cd91360c3b97c1ba92d7744e5eaa40f49d1","sha512":"d2b3aa49a13fab19872665e4a0440c4759ed82972e69efb12a7febebd12378117460853e86811e5ddc5a703140acc71839015155f70b8ee602c87b185320a6ef","ssdeep":"","tlshash":"932157e4d65c026d207ac2547a08cecf618db2b7a61915fbe4cebd34e386d41396f389","first_seen":"2023-04-08T15:34:22Z","last_seen":"2026-05-30T17:32:28.813709Z","times_seen":1291,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/css/bank.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /css/bank.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-1315\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I14cjLLAHgipq3rray%2BwfcxwdDGK5OW0LKpjzkpIHfawQqpby0hMY22LFaQkLnyxdDgf0d0LuIsjHjNuihx4cFW%2BIhW3dgtEedz48q3cy7loAdr75n5asvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853de256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4885,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4885), with no line terminators","md5":"b190c77dfa87c2fa9d0c055e7db34140","sha1":"909ed0e15569be2f3299e8e68dd7ce0195ccbd67","sha256":"ce416742adf00033170694298361d4824de9c49c9c0f66137190811ee11e53f6","sha512":"281f4e7990d47272ca0e06060d230f2bbf4659dd0808adde2bfec2738514e259ef4e1e88b2f1d4b582ba5fbb65f40828896f154bd3e9d2b4a178da4c8e3f8a31","ssdeep":"48:/gvk8yRa1W95y/miuIXyy71iJMyKXWig1IzRy:/gvORa1W60IiLIX83","tlshash":"e7a1181594c2245afd23ed30a2a1cf68543a9153db1b0dbd01d5fb74238a5dab2b3de3","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-10T06:46:06.301087Z","times_seen":1276,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":690,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/css/marquee.css?v=fqdznpgxv2jki2wxbnbz","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /css/marquee.css?v=fqdznpgxv2jki2wxbnbz HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-89f\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sb%2BQNfOFYYzIB26eTOPCtgGp4cUIS10Ga5ucb0iFrjF1eA0%2FO%2BGkm4wHPhhpO6MAZ1r1YlyYGwZj71Woc75SlKqknoNNXHpS3s0DpWgW6Xrje9WrJtjc5eY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853de456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2207,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ccc75e363025d110b5985afa3187b43","sha1":"25460557a798bd582563b4a937bd8e818396c4b7","sha256":"2d2a7ab1708e5aeee4123d037d8484e9e4c3cca489b4b6b3b931143911403134","sha512":"abd2c4ba7445f3c380036c26a2498d990d9f9103fee6d5f67d5aa489f5a7531affc35dd6fd27e9269d5d804aa36870c3cde5d4182eaf968f9d13839e24f900b2","ssdeep":"","tlshash":"ae41f29b05171d04260bf4842f794201652d8403a28ed9aebea922ccfffa245d1a3acb","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-06-03T16:38:17.895108Z","times_seen":1917,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/dbs.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/dbs.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 35293\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-89dd\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZqqNAdaUB2w6Cy9Un9l%2FU3b2YhkV4L9Gdktg4GklxBDPDD3VedwXhrJ68AMWQxdxJbnaVkZKoxd6Ss1Hc%2FH3e1p%2FcsI%2BVyXMXlb7APPUo2QRENat9DpbyBM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405874ff656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"14fb500fa5ba37f8806d526bf2e2ad8d","sha1":"83a792e6eb5e2d34fd01c32bbe780e3156173b40","sha256":"504f256603ff616123a2d082f00c5df2ea9949bff15e19ae656191e454db877a","sha512":"65956bd21a5be6436e88570b4de18b2288f9a48355247784166dfee78a664250cc50fba09283464c56f3749fd36e783268fed5d8d319a29cb0068f3e1307f82a","ssdeep":"768:qDSJ/oT+FlRyNoxfbL5MN51qBCpo+XHVmbebiUTW72Gyb:PJoTYPzW51YCpbXwCW7Kb","tlshash":"60f2e1e476ce4f09fcd84174059484d5fdbbba7a1741e1c24c878aa3a8870c9774ac57","first_seen":"2025-03-10T01:18:36.778808Z","last_seen":"2026-05-28T13:15:37.189068Z","times_seen":101,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/OdU090E28bZk0bDMMCPIGQ/055ae44c-745d-4e08-6df4-0e91457f3e00/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Nov 2025 17:43:22 GMT","end":"Sun, 01 Feb 2026 17:43:21 GMT"},"fingerprint":{"sha1":"3A:28:EF:F4:6E:E7:9D:AB:C4:E6:29:53:C7:A9:9E:16:D1:E3:4A:62","sha256":"9E:93:96:D3:19:12:A9:F4:E8:7B:DB:4C:FB:33:6F:AF:29:8D:80:A2:1A:E2:60:DA:BD:7E:6F:15:33:46:DA:4C"}}},"request":{"raw":"GET /OdU090E28bZk0bDMMCPIGQ/055ae44c-745d-4e08-6df4-0e91457f3e00/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2737\r\nserver: cloudflare\r\ncf-ray: 99c40590c98576ef-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfy2ScAqJAult78DJ4GFN6lln5fb7C9F9CBQfA5-d8DQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-images: internal=ok/- q=0 n=19+25 c=0+25 v=2025.8.2 l=2737 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2737,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b537bc9890f57aa6541f643ac01eb82b","sha1":"c9c2262e52de2ec2b258b59420f22c36888336a9","sha256":"cc6e36ba4df1d292f05d61228ce05963af0b0d247ee18dbfcec0d76f2a01255a","sha512":"0750fa734564c8e74f42fc6c2ed2b023400f25b4cd4f623532e9b785b25463fa16f9ec6ff8f2b8a78fc495e8afb2a3dcb84d1491de2b9ea26542959fde7019d7","ssdeep":"","tlshash":"cd515b2295744641ccb9033340adfa38303e901d57bf1497bf9cb428c594b69e22eb76","first_seen":"2025-06-09T00:09:30.006887Z","last_seen":"2026-06-02T15:30:53.612037Z","times_seen":151,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":32,"dns":19,"connect":1,"send":0,"wait":18,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/tabdrop/css/tabdrop.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/tabdrop/css/tabdrop.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2BwUJPc6wwfJh42iLX%2F1TBnxpRuWwTVxn5FE%2BKEvPS%2F0JGMLMbkkD2BE3rBcPZOXqUHXF1YK0Eb6kaS1t0gHo4F9JOATqyXdFY8pboNZUd6wtpwmXkeAXY%3D\"}]}\r\netag: W/\"6466f5b8-c5\"\r\ncontent-encoding: br\r\ncf-ray: 99c405853dd356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"977b638a903b1ca1a9f596965b80f0f0","sha1":"e5b9d1f3658ddf0fa0df67c2a02b5d0b371ac078","sha256":"61e4384b213f36a3a7fc08b44510fd439ecf3c8523b8633f723fb1012d2fbfbf","sha512":"8dd724d2dc3ddd07fc98da9948779c25c983208c9b46e9dc1bf34a1d6077937f32c75fcd36be71ae3d0ae8c35967423d712a928dcd971dc5db67a24997d67ab1","ssdeep":"","tlshash":"4dd0220823a825870b899b7fbd3bc48a012ee146e45b02ded2054bb188a084a218ae49","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-27T00:39:20.393582Z","times_seen":1156,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKqlU2TRhybpMrYaxKXsGiXfLzaRNVvvTdYrBBQ_HtKLeMvIYAXoWv4SHonhQE6rmqLiX2jZiTcYiwyEbr5asBScvzLF69fTwBsZkicPEQFsuhYFJkD_CuDHhd6GgvQwB7vfGnMWU4litE9FyoOwojmFA4tWuf8erXimxAFr4jypWfiNAMOspzyeymuGc/s1600/MONROVIA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhKqlU2TRhybpMrYaxKXsGiXfLzaRNVvvTdYrBBQ_HtKLeMvIYAXoWv4SHonhQE6rmqLiX2jZiTcYiwyEbr5asBScvzLF69fTwBsZkicPEQFsuhYFJkD_CuDHhd6GgvQwB7vfGnMWU4litE9FyoOwojmFA4tWuf8erXimxAFr4jypWfiNAMOspzyeymuGc/s1600/MONROVIA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vca\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"MONROVIA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 50681\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"88fc51874b5fd75e086b9c0a2ce8e6f6","sha1":"02e1366fbcc5c9fad8bbcda409bcc15a9e9c4c23","sha256":"3f0bf4b2a51bd3f446e431995f5c398bf7b44ddffc5d1a16bfb7c0b6b9fd7a56","sha512":"54476845ad8df35fffc6438d604a06e0283505eca538d231603bd343628d633a2e8d7d8d21aae561c757ba3ae8be24e9cab5945b59446740e010d7f8a8063c17","ssdeep":"1536:sZ1eNTgfl21FXHmvgkCPw+qcxLMwP+KvW:ekW8IjCPwtCQwpvW","tlshash":"ea33f1fc4cc9cefd1ba6969fbb29774c03953abe441061659760af8136a597303228e4","first_seen":"2025-03-10T18:34:18.276063Z","last_seen":"2025-11-10T08:02:24.70308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":706,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRAqAuFrJLUZjNkmql3orgH-XRLXf4qxxzS2j0VOlZ3b_WyQgo1yDKJ5qjYFcsNfK624MaMy5Jc1LcPZeZ1nlzP_dTeC9vKJJJMaXSwXkM5aNIDTOaxKHwpMmILuwzJuVEK55u37UlQ9UL2o-gZ0oBKksGzFxbmO0LnzfO4BN_OwWcpateKcsTVEecB2w/s1600/PANAMA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjRAqAuFrJLUZjNkmql3orgH-XRLXf4qxxzS2j0VOlZ3b_WyQgo1yDKJ5qjYFcsNfK624MaMy5Jc1LcPZeZ1nlzP_dTeC9vKJJJMaXSwXkM5aNIDTOaxKHwpMmILuwzJuVEK55u37UlQ9UL2o-gZ0oBKksGzFxbmO0LnzfO4BN_OwWcpateKcsTVEecB2w/s1600/PANAMA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vca\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"PANAMA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 56142\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"1be66d83d0dd713549e3a2f26fd708d6","sha1":"6d1ea6497616411f1a57706e100a6f5f853aa523","sha256":"49992f1f5cef96249484a96f171b8414b21889070735b259fd29b9cf9a7f1860","sha512":"7da943c72c622709e139c06b0a3cb61c06fbd8256681cc14e1f68afb7dc404572962a938ee7d3001288138cfa7da70f1308ef1d4fe6a944bab2a61fe08772fcd","ssdeep":"1536:CYf9mGQgfsSA53pFRuG1wiyPkgseY/26uA:CEn2NpKv7kZeY/JJ","tlshash":"ac430219fa8508b4f4cd747d1c7d19141d97b1db8e4b8f2035ee38a297c9db28a62d31","first_seen":"2025-03-10T18:34:18.218091Z","last_seen":"2025-11-10T08:02:24.70393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":613,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu3znwn7W6f-2paqVN1JpmzJJ3Act0JGVYeu3BMF1ZdjoD7noVDs6bhTmxdFf3xpiS3Pnqj27HS_KklVhlITcviEgaklDHqafVoaRuEDjgTgMbC7tAhINfNlrFwzwtTGs3NJKFL38ogNp1s6B8XWQuZcpDXBEOFU7UmSQPcxpL9yPEiACWtpEMg1k0KCM/s1600/24d.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiu3znwn7W6f-2paqVN1JpmzJJ3Act0JGVYeu3BMF1ZdjoD7noVDs6bhTmxdFf3xpiS3Pnqj27HS_KklVhlITcviEgaklDHqafVoaRuEDjgTgMbC7tAhINfNlrFwzwtTGs3NJKFL38ogNp1s6B8XWQuZcpDXBEOFU7UmSQPcxpL9yPEiACWtpEMg1k0KCM/s1600/24d.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"24d.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 1200410\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1200410,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 269 x 132","md5":"3c46850884bab3e159b05a6ec9e4f957","sha1":"a3167880431addaab9c29f43b46226cead3af42f","sha256":"07dd501eb5f755aef37570c04954214883accdfc839ced9eab9d361c33d88197","sha512":"2dadbfa8f032b8f8d56a16dbdb58cf549fbb5c4fdfca3e612adffc294b09a4624fc35219d12ac6021ddf228de35c7dc68217739ef4f32d3ad84d0b147adcd23a","ssdeep":"24576:BYLNbvPZqAUG7p8dgoYfjDwkXUFTGTgYBclaqu:BYLNbvxqAHoYfjXkJGT1cE","tlshash":"952533ac45d41c8db26b0ed43b3b42a379b5c7c66f4487b2d9597902bcb486ec82e35c","first_seen":"2025-11-10T08:02:24.704618Z","last_seen":"2026-01-06T14:19:09.763699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":503,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitH5fvFSAdbTg0P7fs4Xh4p907Qcnv3KPPzx_aQoJM_AW7r3NdT_FWENLOw_g0S3sG8HVatB_1g0PQ662SSTFWv3BKuTRG5jcsulK8AS7xfuMi9S_waKJ52yJC2iro-ZlTUdP7qNFifT2GkJUbashhgb3sZ-X3mbq12ZGaM_qh_5P8ocLKYQZplsVGAUU/s1600/SPANISH.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEitH5fvFSAdbTg0P7fs4Xh4p907Qcnv3KPPzx_aQoJM_AW7r3NdT_FWENLOw_g0S3sG8HVatB_1g0PQ662SSTFWv3BKuTRG5jcsulK8AS7xfuMi9S_waKJ52yJC2iro-ZlTUdP7qNFifT2GkJUbashhgb3sZ-X3mbq12ZGaM_qh_5P8ocLKYQZplsVGAUU/s1600/SPANISH.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcf\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"SPANISH.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 61228\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"f0e6c158d6a7b510bc33df1fde3b22b1","sha1":"eedeb41174a83c528a7d27cbb46d34b30400c072","sha256":"51692b6b18f040ae7b18141674210a34626a8717acf46bc9d83d9a6e9a24ddea","sha512":"d2fa184e56c5bffc830954b9ba2ae17663285e03de00455dcd37f6af6f653fb67540c33614d016c07306d301e556f97eb4b395daa7aeca1ea11c3777aac31075","ssdeep":"1536:jIzdpLwaFBstcGvJYspinAzNOrS1Lk4w1+ouS:jIBpLdBsyGqspivrSFk4w1nT","tlshash":"2b530242a09d63f44afbcbf45a98114097d338e8469848c20eeec933f5b79db4e25d97","first_seen":"2025-03-10T18:34:18.305591Z","last_seen":"2025-11-10T08:02:24.705915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":662,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/jquery-2.2.4.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/jquery-2.2.4.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-14e49\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oJhzjoBQ2PJr4wVvCJbJ85cF18EtomEejKjjKRp2DlHkWDNKHD3Th0mtIyYAIdK6uR9BFIS%2FFE2424jOa10TRSQxjKSE%2BrRa1jMFKCB5JLsoGqK65pgduM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405854deb56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"b354cc9d56a1da6b0c77604d1b153850","sha1":"a3d8479f4d4e39b131bc9a53bbf53d1fbaa23732","sha256":"fdce77a6d0053f32d231518a84a71bcab5c86045ed52369da00b89d4284aef46","sha512":"b6dcbe11a0f90ef61a071fdf7d8c637f95fc77969cffda9f291772b4fa2c2f9020eea2916da6f1113d746afeafbf592d0db79fb2f2f5400bc0a0fc10a066ba98","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a98Q:v4J+OlfOhWppCW6G9a98HrU","tlshash":"1783c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:06:18Z","last_seen":"2026-06-03T17:18:38.872881Z","times_seen":8387,"resource_available":true,"data":null}},"time_used":972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":376,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/frontend/desktop/template_v1/before/index.js?v=fqdznpgxv2jki2wxbnbz","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /js/frontend/desktop/template_v1/before/index.js?v=fqdznpgxv2jki2wxbnbz HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 15 Apr 2025 05:39:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fdf11d-3078\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4lL8KwVWU79YyLFzUutE4D%2B0uzoRw8r58GCy40hV%2BCJBh9QSuE6sipB%2F3AXgqGvgFt1gP4BD%2B1AKhR7v%2BwFa6HVK98d3sXiKql%2F8lyE8DA2Wnoy40z2gUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587985656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12408,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12408), with no line terminators","md5":"6e5ce401fa29e20cf8f52e5d754a5d5a","sha1":"b55566fc452442bfffc73943eea5177ccd00fcac","sha256":"7f1d23659e76eca87d310351b7598a64201f99a8be2a947319f0182cdc3b0cd2","sha512":"e4ac4422d6aeee85a36002a6ca346faad7e1de6510ed0253b2130dfefba2bf6d3e186a0907af294df5d71118a002f6dfc6cc9f2e4e9eef40ce374fed672bcfd5","ssdeep":"192:ATn2PoqeRfRll0OR4HCcbNQNJ/OhxwBZcAoL/3eqnhqgSt081qq44WIzEtMyCGWV:YpqEPRfeIJWhDAoSD3t0mlxWeyOfOydJ","tlshash":"3c4294c8b6c6f47503d36670902f1106f23a6919b51d9480f72de9d2be7884ea237fb9","first_seen":"2025-04-15T10:15:48.992845Z","last_seen":"2026-06-03T16:38:17.875329Z","times_seen":1772,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-hongkong.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-hongkong.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4709\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\nage: 79\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\netag: \"674924a3-1265\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\nlast-modified: Fri, 29 Nov 2024 02:19:15 GMT\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kNKuNV7gXMCayke4zDmC4HA1tS1v3TKIDY011txSjgrwtmaj57l3ePq5PhmIOe3yaR0KH5usIHidtKhXPpijzX4a2TksSmCUMScrREkDhdIlvABX%2BnM1jhQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c40586cf6056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4709,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"606bef132f2c25652dd62b4e7a5ff71e","sha1":"2e75d728149ae3c864f8f2b827841697ebd5481e","sha256":"8b2f204a6ecba604871a339562709f1194ae9ab0a2c8ad61564e4788682b9f2d","sha512":"4a27302f6ec32081e6bc4470c7060451c73b81fb3ba99f387d7770c8848de966855aac85b9008481389a57264a484aa45b7d2e6d1c932d6d444172606ea66708","ssdeep":"96:tHEgHiDK8H0HbHtptQQWnOAEV6OIyNhQN6JeVyN:hXCv6H7WNU6yNhdJqyN","tlshash":"79a17d94436141e07e2cff39a9524e390a805c2d5d88e36fd31f3f84247b5baa824fa9","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.913251Z","times_seen":1733,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/text-rotator/jquery.simple-text-rotator.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/text-rotator/jquery.simple-text-rotator.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-df0\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ujXKjtA1lzdNAuWCgr8nAWqBBuTRjcU5eLoUKSvOYdiCvZmOpzli9jNa0crnNaoXkuTbGf8dPFJylrPsSM%2B0SUh25Wby6vhf1N96lmgnAiGcXCtMbVx77Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587782f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3568,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (377)","md5":"9964685a5509aabd8ab04dc6257d97f5","sha1":"927c58db28fb33c328a5a0bab4f9e3a93555f651","sha256":"95df7f4d192968c5c68e43a936016ad025fac7ce02a221a1bf13be6592667c30","sha512":"f58116f313f5d862f6f561383d60e0cef0056bb77013b9060b60e3a2a225fb2d55cb5691da77b5cd76ca10f71929f1697b267bde4ee489352efa3475f58ed279","ssdeep":"","tlshash":"d171e34a68fb48bdce3a91eb83ee1f56247909b28c006441139b5b7e08f19456bdde63","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-03T16:38:17.869284Z","times_seen":2085,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.7457137338252501:1762760046:DjrnbgqXBLErdk1gTFudvzNr7_EY6AL4BCmtyfoLbMU/99c405833fba7e32","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.7457137338252501:1762760046:DjrnbgqXBLErdk1gTFudvzNr7_EY6AL4BCmtyfoLbMU/99c405833fba7e32 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12131\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-ray: 99c405927a3056ba-OSL\r\nset-cookie: cf_clearance=1q79WqUg1XNdl1EzIlNYzPrWBI1ArTFkvOq6vGjPmi4-1762761684-1.2.1.1-Tor2hznVbPk3wXjmM0C2f9K32lirIPMBd5avRDjjeqinenanr9U_ZWwfNbsEB9ffcUtkxD5pTOSwwPsrHcVxES_207fOHna0HrCr18zrlNQIEAVdb4qdG8QM82f1IFhPqzsQ3._Sfve5m7u..Iw.ESs00yBzpJGePAe6vxnN.Z4LCrEBCrcVMV.PHJPJZc8XrSZhaMis9TColTKZiPoC8cPmZLDpkEiHsY9kIJVbjaI; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=rudaltoto289.com; Expires=Tue, 10 Nov 2026 08:01:24 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S4du%2FDcEmdluhWtCPTrBejMwEGBnztJ%2BJTX5eXe9CGhR2PKs20X%2F2Ic1elTxEtIfslzOKtjrBVdEbixHlnXpMLOS6YijBQoKObwLTyEItcvUgbvk53ewEwqh7ApTydGR%2FYIkWNC%2B5c6i9nRQ1rk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1261\u0026min_rtt=516\u0026rtt_var=192\u0026sent=1040\u0026recv=232\u0026lost=0\u0026retrans=0\u0026sent_bytes=1005792\u0026recv_bytes=69484\u0026delivery_rate=32114538\u0026cwnd=93600\u0026unsent_bytes=0\u0026cid=d8a544bd63584766\u0026ts=2316\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/indicator.png","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/indicator.png HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/assets/css/azl/azl2.css?v=1762761616\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000; cf_clearance=1q79WqUg1XNdl1EzIlNYzPrWBI1ArTFkvOq6vGjPmi4-1762761684-1.2.1.1-Tor2hznVbPk3wXjmM0C2f9K32lirIPMBd5avRDjjeqinenanr9U_ZWwfNbsEB9ffcUtkxD5pTOSwwPsrHcVxES_207fOHna0HrCr18zrlNQIEAVdb4qdG8QM82f1IFhPqzsQ3._Sfve5m7u..Iw.ESs00yBzpJGePAe6vxnN.Z4LCrEBCrcVMV.PHJPJZc8XrSZhaMis9TColTKZiPoC8cPmZLDpkEiHsY9kIJVbjaI\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 2957\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:17 GMT\r\netag: \"674924a5-b8d\"\r\nexpires: Wed, 10 Dec 2025 08:01:25 GMT\r\ncache-control: public, max-age=2592000\r\nage: 9\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVpEbchPgkbilEwJc57sgWmET9FWAfzBwK%2FkWo9kvKBmCYAhq3H5dNrxY%2BfDWfw0xE0TEKNvztpxLhjZax%2F706C0jUk6nAbyQUESb8PAHhYzCcPh689n%2FWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405937b1556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 51, 8-bit/color RGBA, non-interlaced","md5":"bbad9d0aef39c55cba161ff5ab3c7d30","sha1":"f9f2e4b293fd67a108c95d221437240c810d67f4","sha256":"b7704daabf987a684873b073f895609ac0dead3f8139dbd872434a8c67270e05","sha512":"1796b3d76b1725c15ea06a449290b871f1edc653cad9938b877e625cb8043f9d4cb9e93fb7494f37b823434cb7c3acf3c2cf508bde28a11c48c233424f7688d4","ssdeep":"","tlshash":"6451d809dd149c418b8efb449aea9252263b1bd05b41e51abdfdd413b9700b4c64ddc2","first_seen":"2023-05-23T00:23:15Z","last_seen":"2026-06-03T14:38:23.072877Z","times_seen":975,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/vendor/ribbons/3d-corner-ribbons.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/vendor/ribbons/3d-corner-ribbons.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb25-14f6\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuDzo90x3x17IpyY%2BHFCHL%2BaDBOZlxBBSDqrBb%2BeCJ70A4F5xsBneDOeTkmwJZh224B6P8Pst7M2YhEzXkC8CZHDOul6i%2F2%2Bk5C0kn5R7b39nIVSHg6TAYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853dbc56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5366), with no line terminators","md5":"02cc0d0020f373e1247ee9e7c2e7ca04","sha1":"0ed6d3399c1abf1feecf4bbf59c517fd055a2678","sha256":"7cf0b8467b88360e4e11881a231c013464a4fe2c449887baa7fde731a7058845","sha512":"e553c0153950f37f1d95db61d0f7f7a900920def8c00b429a3ef177a1bc813de101d10c50deacaeb0394f9c64b758724af78586c90ec005b0c2fad6c2a33e247","ssdeep":"96:UKVGkPjynDc9vFGoKSHwgx+jU92+lg9m4q9ELm9rX1a9umtG9kv2u9eZU91WScnC:UKvPenDch7xWs2YQm46ELOrX1Kumtuk1","tlshash":"29b14f166cd990eca157c11dfbf9bf68d7299153a511ceaef302e4f74126088227af13","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-27T00:39:20.278911Z","times_seen":1262,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/nivo-lightbox/css/nivo-lightbox.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/css/nivo-lightbox.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-119d\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2Bh4H4eNnskoBxcoN0k8dIpG2CZ%2Bwoc%2F0gCDcuh%2FJIaVXaW3lcraoBbSyzpIi8h68GVF5PcXO8usCKvNbGvJnPWo6KxDnPNEXqzI8QtRmGUAC5SDu%2Fep3zI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853ddf56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4509,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4509), with no line terminators","md5":"4750224fdc2dd0cf143592379f97bb0e","sha1":"efbf2ca2420b699406aae8459c65b31dc5f8fc18","sha256":"75beb6ea66cfacbbad808671aa6b753ef5c5bf4e8d5efb9adf9cb840379ed803","sha512":"a43c77507e733b377227e210deb5692713309ee793005a111f267e05d1a5edaeeab538f9474075b252727e81b7d16cb24cd7758a8da37bbff021458c825886a0","ssdeep":"96:6QUcSo1oZNUcbfCDa4/I7wxWJkne1i523bdb6:Wo1zV","tlshash":"e391e72b2712114980eaa216b6c8db741f3cc11b79236caf7307d6172acb5d81d97e87","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-27T00:39:20.312Z","times_seen":1264,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/defaultTheme.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/defaultTheme.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb24-49c\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2vTPtg38Q8MNVDO1p1g1eh32qLgs%2FeJUJrhYOn3DC873hY3YQ97u92ye6TO2saY3CFhn%2FyBKIM1vtnEFrKbdLtL8nVGb5VlfVf4tceSevAf5LS%2BlTu%2BtgU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405854de956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1180,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (769)","md5":"18d19892d13e212c46e81ac3d66b78b7","sha1":"88fdb09c89c08831f9ce0c5a2876f16225dbe01d","sha256":"e8a7b2ed05fcc0a064737d127e166f8e81781b746b70d8e9aeff7ad0b055464c","sha512":"6fe4fad8464ac1a290f0f2303a95b67e4fc0c4a5fd0dec5635bca7263dee98b0fd5cf09cbc771c3578ef6c011167ea76d909746311fe7cacc5986aab99ce335c","ssdeep":"","tlshash":"bd2125858bff3802d91dd2adb49d29fda9204726739b08bcd385c00d431892e326bd74","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-27T00:39:20.304485Z","times_seen":1122,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXgP5sLKMSXpJbhOM2vwZ6D_hnQvKeL5LzY8MSMnITeEmDV3_cFWdarjh6_oIvZ2yqJwhSATdT9Erj9csU3tLBtECpbPCJszEdlc22-fFcBAMYYbsv6TFiKsUlKplPrZJ_QZngWJCQUQDGO4ZU1e0bpXLV5qMifgygJ8u52Rtqv4uxG8vH_0nwSUTFbH8/s1600/toptrend.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhXgP5sLKMSXpJbhOM2vwZ6D_hnQvKeL5LzY8MSMnITeEmDV3_cFWdarjh6_oIvZ2yqJwhSATdT9Erj9csU3tLBtECpbPCJszEdlc22-fFcBAMYYbsv6TFiKsUlKplPrZJ_QZngWJCQUQDGO4ZU1e0bpXLV5qMifgygJ8u52Rtqv4uxG8vH_0nwSUTFbH8/s1600/toptrend.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"toptrend.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 94777\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94777,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 147","md5":"bbfd25c3e5e8f076136ee52977ff94f0","sha1":"5e03b8acadb1052b79870092f0a2f6f3c180a3e8","sha256":"1426df5bd67d1b30680485625fb4872955090b043ff574fc431b4a24073cb977","sha512":"11e5d38b54188f97cae15e038c5e04efa1ef28d115169c107688dbd4cc45e59d72fcd9cdf9db76ba613575c5c6b0b69d455373d22e5e55d3a83a4168a9d56d19","ssdeep":"1536:UHPyeanKITrYulsM6QR1yjXYFs3WTgzzMzumoNli1icwfBOLBTxp6uiRd:ue1AA5662oFs3mgzzZN8B7p6uin","tlshash":"2993124cef145956725a2ceb0dd839acd87e32288ce5f9eda98df0bee04502e5c1d243","first_seen":"2025-03-10T18:34:18.28092Z","last_seen":"2026-01-06T14:19:09.742081Z","times_seen":3,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":393,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdkK-flQkEEuL-nU2x_Z4eJ9zBrXP_rbOqwLBNVPx7tm-OW9qDIgailsfiEt6X27fwYp_AzIgJ8sB2VGI81Yo0qQ1i9xyoVzAlWtwqw34WznVvBBzo9w3TQJy79F5XUXQQ1R71yNhyHqoBrnlTCgh3RHUNPlKpJLpjQJbf7HSu4MFdizfkfwwvkXqPncs/s16000/gifrudal.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjdkK-flQkEEuL-nU2x_Z4eJ9zBrXP_rbOqwLBNVPx7tm-OW9qDIgailsfiEt6X27fwYp_AzIgJ8sB2VGI81Yo0qQ1i9xyoVzAlWtwqw34WznVvBBzo9w3TQJy79F5XUXQQ1R71yNhyHqoBrnlTCgh3RHUNPlKpJLpjQJbf7HSu4MFdizfkfwwvkXqPncs/s16000/gifrudal.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v9b\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"gifrudal.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 477011\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":477011,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 728 x 90","md5":"f4c1ad4240c5c9708b66d7dd65e9920d","sha1":"7e0e30fd81c6691eb92aa5ad54c55b46e75ae524","sha256":"65ab81be5953383dd210589685b17dae55ce33266690739280efb47faf976d50","sha512":"74cf053ec02afb4790dcf329d3e8094b8c3c417bd6464f7cbdc57c4b2f30bcaf57be2ed1f34539ed357bddfe171083c2cbddb68bb6feee0d7f64af124ed04edd","ssdeep":"12288:+9iNiMo9jNsfMxAOZrIc0bUUp/IXe/nrNB+LWGx3qdDy:+9wQsfMxArbUs/IOpALN3qdu","tlshash":"63a4229ef6b6ab58f80500759f695b4dd4bbdab08c4a21371e0db8e22d306be1454e33","first_seen":"2023-11-05T12:09:26Z","last_seen":"2026-01-06T14:19:09.713953Z","times_seen":7,"resource_available":false,"data":null}},"time_used":942,"timings":{"blocked":59,"dns":2,"connect":7,"send":0,"wait":618,"receive":172,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgg152sBktYJakoLR-SuDDGs6gSQQSkGC51KFmIzJu5B_Lgb46stfLMGjQyMw8zj_bv4NiEskIn9W4AAZm3M0z7k1IHbHiuBFuzmT8TM2SRHC8tDePbVo47rnHMy0V1AD1pIYuemfoXLs0LQVDKq1qe-YZJ3njwlIO_r9cnVlKZuuAqg9uM_-l7aKUQR9Y/s1600/OREGON-3.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgg152sBktYJakoLR-SuDDGs6gSQQSkGC51KFmIzJu5B_Lgb46stfLMGjQyMw8zj_bv4NiEskIn9W4AAZm3M0z7k1IHbHiuBFuzmT8TM2SRHC8tDePbVo47rnHMy0V1AD1pIYuemfoXLs0LQVDKq1qe-YZJ3njwlIO_r9cnVlKZuuAqg9uM_-l7aKUQR9Y/s1600/OREGON-3.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcf\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"OREGON-3.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 70089\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70089,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"89f9822d69f9b3232960ae025cc84f4a","sha1":"3d6705cdd601f47056a0cde5ea5b67c521366d18","sha256":"f1a610b71fe573f3efe6774a774a2111783a225fe63fc6f2f94aafb704403251","sha512":"073e846b8b04f4df8fe8c6a668038e12a6453abf8a8ffba9971f7f5cdb3e7483a8b2193fe48ed93570064437f5cbcd02f77037b5feca0cec510a7762b88f859d","ssdeep":"1536:Hawop1wEb1mF+oSF4RMRzQXJ9tl2sujBi5ZrEsGuTfLUvSxFbEB:H7oJb1mFhScMRU/tl2su9i5vGYfLUjB","tlshash":"126302b470b18f3e875f6d84a16d739f87a0bb428d4d31896891db1c3eb1ac6630629d","first_seen":"2025-03-10T18:34:18.301442Z","last_seen":"2025-11-10T08:02:24.716573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":703,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAl72i9GOiBQMZfTfwNoa5OJuohSprDDkajs7zH7G09bCapJRc1vaszOcK4UUCoJtcfYaGAPdLH4bCCAF1_oZ0CiTBbDw95O1AqTFY1mNVpTrgmAJ7fbvXKQwzW9nV8CHZQs_qu6rodRVFdb-5__6AiUYuHcV2sqc-0FodAMDbwcuRvn1V7MO9MJu2JFI/s1600/toto-macau-3.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhAl72i9GOiBQMZfTfwNoa5OJuohSprDDkajs7zH7G09bCapJRc1vaszOcK4UUCoJtcfYaGAPdLH4bCCAF1_oZ0CiTBbDw95O1AqTFY1mNVpTrgmAJ7fbvXKQwzW9nV8CHZQs_qu6rodRVFdb-5__6AiUYuHcV2sqc-0FodAMDbwcuRvn1V7MO9MJu2JFI/s1600/toto-macau-3.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"toto-macau-3.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 71017\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"028a8b4748457d488027b97b6672a3c5","sha1":"dcc7ce3d085b34dcb4d3d4cfe1bb02a8f9e79350","sha256":"33243e1f4c989f3cded7e588a29e420d3d0d5f149c2e29e630c61cd6a5269222","sha512":"7a22c867310ecc1401147cbcc4d4068c5c7904a4e3152f2492fbf62517e7e28c838b2e6e8527f44260269aab47454b2f6b18bc8744072e57a553187441132bc8","ssdeep":"1536:+oS0OVjV3m+8y1kGrlHjuU8Cw8fZ67HiCEN/A6W1s8Epvr:tijV34GrlDIDe2CdN4ORr","tlshash":"16630110d9c14bf6b91a1d06d5fba1494c857f8d2be4037c01aaa0f4e64ebde82e2b81","first_seen":"2025-03-10T18:34:18.284677Z","last_seen":"2025-11-10T08:02:24.717214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":618,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.CLsZzRd8.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.CLsZzRd8.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOETocAdBWA5JmrD5b58v4tWpQz0QMHt4mheMAlCaGY0ppYXg2up33Hl27O0qo2kgAeGBMc8b87rzT8BAA\r\nx-goog-generation: 1762425812810465\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 138438\r\nx-goog-hash: crc32c=XsXxTw==, md5=PSpWiBfVOrKQ0qN41Inkkw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 43556\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":138438,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47962)","md5":"3d2a568817d53ab290d2a378d489e493","sha1":"aae9144b3ec2729ab947169d089500a2dedfbe32","sha256":"0639f166c83161ece747ec9c46af182537d315c4a6f2ccde19114a6d277c64b9","sha512":"e74c5a251efd275651e9f26b4da981e052daeb02ce590bf49a421f72ae9dce0fd14b2dcfdcff36229bfd8ade77bec612a065908f7c526e5d8defdfc82735cbb0","ssdeep":"1536:NgZQbc7oU6uh2Cv/tuq0s76cX7tx5sQT4tGFy3i0QjMC8IKwBz8YBiucFQ:NgKbc7opuh2CX412yy0ScOBz34ucFQ","tlshash":"c0d308e83995f5626bf312a700af5817b33c191b280c8960a211fdddb5b805eb17bf9d","first_seen":"2025-11-06T11:41:58.430456Z","last_seen":"2025-11-10T11:28:01.973325Z","times_seen":424,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daftartoto.co/img/luckyspin-rudaltoto.gif","fqdn":"daftartoto.co","domain":"daftartoto.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daftartoto.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 01:18:36 GMT","end":"Tue, 20 Jan 2026 02:15:13 GMT"},"fingerprint":{"sha1":"A9:7D:CD:60:91:DC:C5:17:65:B1:37:0D:31:82:FD:6D:51:3F:33:57","sha256":"7E:3F:B5:B3:6A:12:04:DD:7E:14:01:E4:0C:D1:EF:E2:51:38:D4:31:A9:F9:21:F2:24:04:6B:4E:E0:52:CF:F5"}}},"request":{"raw":"GET /img/luckyspin-rudaltoto.gif HTTP/1.1\r\nHost: daftartoto.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 70103\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Nov 2025 08:01:22 GMT\r\nlast-modified: Sat, 04 Jan 2025 02:33:51 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2Bhmvu%2FZZ%2BHM8gpEIV1k5aAkyMPX1fZbbyK5B4CC%2FXZhQfvEhYzUZ4zQlINLgLBoXMXOY0l7zXpHdsUbA8AUfZtKPHCaOsoCk04q9qs%3D\"}]}\r\ncf-ray: 99c405876f94723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":70103,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"ff761d3402f2abd4c2a37b0f5f953558","sha1":"7179ae14690ed94d4d46c75c200b6a0998c53f84","sha256":"a7af40be34caa7dabb90fd18470c326230d4f447e4b569ce88f750932600c0e8","sha512":"a39ecc9d2c3ec80636eeb28f211ccb02ed016e6db015d417b137cab0585813d4798cd6b96cb7b43f57282e4c1fde45ced948940566e4a5447a027a0b818f21fa","ssdeep":"1536:bPCAg+vFXkoLsEKdlLXlWS1Ag1tnR16ru+NDsdBMi5xtyJcaafRB93r5iT0:bbg+vF0ogEUPBAAtR14uWGZXcca4H93x","tlshash":"54630227cbcf9daf423cc988d43f01f83ca8c8ca7162156cd9625b9ab74066c72c852d","first_seen":"2025-03-10T18:34:18.237573Z","last_seen":"2026-05-30T18:35:53.176453Z","times_seen":44,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4bAdwoffkp8LNAbm2pjNc4hIqtHI8RZFEheiBScg_Rcv1l19bJx8UEIM5Yv9XiCYZjACtLGwdjRu3UFjVn9tQkqKF-RWnVTzKc6ca-hJIsqWmCB_02zXT633jjxV0jRIY3Aw_DXQ_Ytsph8Iwf16pf1-SB3ObJtbav-f8lME8GnC-l5j7ncKNE_qKMGAW/s16000/rudal-49.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEh4bAdwoffkp8LNAbm2pjNc4hIqtHI8RZFEheiBScg_Rcv1l19bJx8UEIM5Yv9XiCYZjACtLGwdjRu3UFjVn9tQkqKF-RWnVTzKc6ca-hJIsqWmCB_02zXT633jjxV0jRIY3Aw_DXQ_Ytsph8Iwf16pf1-SB3ObJtbav-f8lME8GnC-l5j7ncKNE_qKMGAW/s16000/rudal-49.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v2ec\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"rudal-49.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 236997\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":236997,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 840x480, components 3","md5":"b3868b3f08a88be4cdff40bacba10292","sha1":"8aedd6b570e9727a42af98fd49bc620d47290fb5","sha256":"25ae949cdd6f349b1d4565b488ca69efee059afd27c5a4f43011d04ea4209f65","sha512":"394428532d30e1c7c827d5abb158345f158af546e043a0c005c7b544aeb888bdfc74dd8e3791376680f637d6517002f83641321b84a488747e703b3698bd9f61","ssdeep":"6144:Auywdw2ByYxCRFJ9d4L2JY8XJobe9w8XRdb52GV:Rhyw84e9w8XRRFV","tlshash":"cf34236ca0351e35b18cc13ed31cf9780f598e12726a679bc5a8a351f6b06a134cf6e7","first_seen":"2025-11-10T08:02:24.719594Z","last_seen":"2025-11-10T08:02:24.719594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":786,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEganjmMYvPKXYbSAyW8tydgQwDl5IvS2RrrvgZTXlwr7Sm9PyoFXp4ckHBCFXghePPcNHvvj4U-Q3oBlEsAyWkCXFE4AkofVSUIGD13kaZU5lBj0Cm0_U6oYzaf5rhZlluhCDQzvnXdCfxIl9tJcJybbP4xRXRBKPS06neoyWpDBfDz5TlU8h1RxOLf2uM/s1600/CHINA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEganjmMYvPKXYbSAyW8tydgQwDl5IvS2RrrvgZTXlwr7Sm9PyoFXp4ckHBCFXghePPcNHvvj4U-Q3oBlEsAyWkCXFE4AkofVSUIGD13kaZU5lBj0Cm0_U6oYzaf5rhZlluhCDQzvnXdCfxIl9tJcJybbP4xRXRBKPS06neoyWpDBfDz5TlU8h1RxOLf2uM/s1600/CHINA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"CHINA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 59505\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"cf22efade2200bdc058d6d77d93c5dc1","sha1":"9747392dbe13db057ac9319259c261120036aa75","sha256":"e3ec66aaf946c47e8b10bc1b8157322b69e1d8c44f9156d96686ad7060cf2e40","sha512":"6390cb40b0bf1d150b4cfb4cd313c2640cd41aaa7ade60bded37637ae8d7da48e8f8bb0f360e0af7060f73d14072f4f8752e0762ffe9e3a3400b9d9a362c41df","ssdeep":"768:cT1/ym0IbWbfwh1e19d8lRALhh1q1nBKOqpLpbnKvL2FKdlmjroK0+G9EclmtWua:yy3GoPm4np92Zm50+G9EsmS2OaE+NxI","tlshash":"9043029b4783a5faa341d15c51accf2e0ff7f4d3ec7e209931046d56d868a1c42eab84","first_seen":"2025-03-10T18:34:18.300046Z","last_seen":"2025-11-10T08:02:24.720629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":665,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.C_rgEAoe.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOFcn72E5JYlXcPp7JnSbaEK8a3a6TGt0iGWs_ipMlLyEJOjkGGrX7WUiMHHTvsU_VYZ\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\netag: \"1771376dc07da48b3f03339d86d57b7b\"\r\nx-goog-generation: 1762425812761062\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 193\r\nx-goog-hash: crc32c=C03sAA==, md5=F3E3bcB9pIs/AzOdhtV7ew==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-length: 193\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-04-09T10:49:40.045057Z","times_seen":23532,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOG3wu8Tc8SrgqBrWqts3KVLOgHOnBT9_L2Vc-WKhewmIjXTOlqWuEkUpemi-PVkP6M5QFwSD2M\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1762425812828866\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-06-03T16:38:17.878345Z","times_seen":29535,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/sinarmas.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/sinarmas.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3215\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-c8f\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCUJnJyPqXTy9mD3HEqb968xmQX4cnVg7Bc18CKLXHenidje1r4r2SiVJBSu3bFogi%2BmgDF%2BpBIzlAJ%2FwdRa0YYgYbMDX%2FloHFv%2BAIcMYeFnc15UvPDPfok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405871fc756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 23, 8-bit/color RGBA, non-interlaced","md5":"73d053c5421d651ab7a55b80a0c3124e","sha1":"4292564eb27a6a8ac74e6e8a2dca08ab6bf1aeda","sha256":"e16b358ac0d98e0eae590a78af0f4da1616b96f54ee57bb1d498505e2a104134","sha512":"69ce6496937596e2a005259b29a217174d8c7e7dcb2795f1ec384b60e7770647ac23e16b8e9d999e3d866b3bea1a941eed974c67b4f95d315ef6bec45db152cf","ssdeep":"","tlshash":"23615a955ec3da55a0c0b635b82d792024d869027c2d0ecee51ce309933beb3ba4a75b","first_seen":"2023-05-09T14:48:56Z","last_seen":"2026-06-03T15:31:23.376459Z","times_seen":659,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v6/dazS1PrQQuCxC3iOAJFEJYUt79146ZFaIJxILcpzmhI.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/robotoslab/v6/dazS1PrQQuCxC3iOAJFEJYUt79146ZFaIJxILcpzmhI.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 18:36:22 GMT\r\nexpires: Wed, 04 Nov 2026 18:36:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480302\r\nlast-modified: Thu, 28 Aug 2014 20:40:48 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31576,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31576, version 1.1","md5":"031611afee9339d4e1f76795a28aaeca","sha1":"8be046d89666cb1bc0323f4a22c6d63b62b922cb","sha256":"2de6a4f3964c03bb35fb9d54b3de00ac38330f5cd91389a3d462269c27775373","sha512":"5a640f6c2eca78c39646ef4bc1af2f932442188c6e1eb31f55c28426fbd940416e46e8d5da0be442d302bc1ab71d6585acac24bcb9bc3e0c8b1cb68ed9d7990a","ssdeep":"768:/OLXvKTy00GtnIF4KZnHlsaa8Nj6Vii1BLT4v2mkwEp1RK:IH00aGlsaVNwi8LsSu","tlshash":"5ee2f150de5ab94652aa0e7450c0021dc27121ccfbf8aca1b739d4d1966ebf799ece22","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.121944Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/json/floating-icon","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /json/floating-icon HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nX-CSRF-TOKEN: 49uA2FL289ygP967qIHsPVo3wM7wL7em2s0Bj1GV\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anJ38xxQ40XjBsjT9UZTvBa4HSzBBmjseP67r9PhD1KQ2itTo1p3bGsWouOGiW0j1vZ0FlfmULH%2Fjk5eZzcor4mqQITq7rcaHG4TKv9YikkBJVMI3493OOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nset-cookie: laravel_session=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%3D; HttpOnly; Path=/\r\ncf-ray: 99c40590a8b756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f797622117442eb8017a29c9b63e0d95","sha1":"e551a73ed156633b16a28db531fd51f1721811bb","sha256":"678b72a40035fb2e414d41e9c938856b7d831eb6f364a35369f56c239ab837ba","sha512":"0c59e2b1a38e703cd1e3175e2269a6eff388fd7012c51cb2fe0eca45af1e1eb6ad4f22cbcce95bab750e349af0d16206a86e41d39068bcb80874a29f67ea08a6","ssdeep":"","tlshash":"86a0220022003c388f002acbb0002e002ef03822c82c2880c00c200c8ba80ebfc03002","first_seen":"2025-04-07T22:45:34.719026Z","last_seen":"2026-06-03T16:38:17.992278Z","times_seen":1789,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":716,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmTEDzgHovN76ldJ1TAzWWFdv15zBjLckMtSfUz_HjD8BeHRdvUUllffhbxoSLqlQ_INdhoBYtavXxbTryw_VwoyTqOu2lbY9qP4oCZlnWg8qXrTJL5mpiNEeag4So3eiB0gFIgvuUWojqs9wWBhodhBcvdO-m_jbIZlOx2ch9hxUyiqDpnVn6poD27Bw/s1600/LUSAKA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhmTEDzgHovN76ldJ1TAzWWFdv15zBjLckMtSfUz_HjD8BeHRdvUUllffhbxoSLqlQ_INdhoBYtavXxbTryw_VwoyTqOu2lbY9qP4oCZlnWg8qXrTJL5mpiNEeag4So3eiB0gFIgvuUWojqs9wWBhodhBcvdO-m_jbIZlOx2ch9hxUyiqDpnVn6poD27Bw/s1600/LUSAKA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vce\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"LUSAKA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 54255\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"46c8b381a424a5b196eda80f96e41828","sha1":"ab55da6a005c13baf8a2e8d6dc6d4dfbbb359508","sha256":"52d83f0aa562bd9756b0b82d5f7d44828e796c298c1c84322bb0836c230f557f","sha512":"6f0659657dd874cdab7f6c4fb50f1abf0981a62151a8a794e8deec39d81ff4652f130bbb982311e72a105631d482d95cd139e496c0e5f96fb9e997f92cc15699","ssdeep":"1536:0I0/ektB/a66Bstl31q0OvDYvD775LiMy/qX99q:05/btBDIYf1+MOqX/q","tlshash":"6833f164f88e63715017baae10fd70d6b1f6d03fdfac46829576e0869026f96010bba6","first_seen":"2025-03-10T18:34:18.260173Z","last_seen":"2025-11-10T08:02:24.72495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":703,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Nov 2025 13:01:20 GMT\r\nexpires: Thu, 05 Nov 2026 13:01:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414004\r\nlast-modified: Wed, 14 Jan 2015 22:46:57 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26528,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26528, version 1.1","md5":"b20e0cef1fd0ee15a5fc0d150d4c9672","sha1":"7bef9051bf8ecdf269228c6e743dad5a8172aea7","sha256":"47a6d754139b198b90326c9ad8c22bd5e2ba5e2d7e2eeb443deed603255a611a","sha512":"cce8eb93332e18c5d4897c004ea1241f012cfa17da4f05ce87b3246e56274f9d561a4c2b49bada58f1d5d1d8f17db5a448e4bee78c0d8e3dd9a5047442d05b4a","ssdeep":"768:+fXipTa5SqjK1O4v/B7ddk/IxEjeRUVC8cy5zIQaqK7nP:+fXipTwf8/xc/20lcbP","tlshash":"e4c2e05f1bd2984df671483cc2bf5aa9f18053eb13ea7a745f925a1c22a15d50a032e3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.919115Z","times_seen":2200,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrPMhQC3Bs8ZJbhbJeaogZ8zxShH83skobDZEIOdeg_FpTTo3bS-eXv3Wv1t98jZiyaICiIDJ0wmFpN-odeAZZJDa6i_U2NaCaSDZLxhu1uEXU289McFua4Cmugy_ZljG46KogZn4_-Y7RBAbCE-QUZ_KJaoOeXy6qgKS87eax6abSswnIwOyJR-3uf5g/s16000/photo_2025-01-05_16-40-34.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgrPMhQC3Bs8ZJbhbJeaogZ8zxShH83skobDZEIOdeg_FpTTo3bS-eXv3Wv1t98jZiyaICiIDJ0wmFpN-odeAZZJDa6i_U2NaCaSDZLxhu1uEXU289McFua4Cmugy_ZljG46KogZn4_-Y7RBAbCE-QUZ_KJaoOeXy6qgKS87eax6abSswnIwOyJR-3uf5g/s16000/photo_2025-01-05_16-40-34.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v332\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"photo_2025-01-05_16-40-34.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 115303\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115303,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 840x480, components 3","md5":"1b2c30275061ec9edceae404d1b126b1","sha1":"1b7eb3458849f06997b4cb97cf63e61f91023901","sha256":"de2bc88714dd2575e178a3a4a36dce02d1f9c19aaa4434488c718ec97d17866e","sha512":"5671de365b47137d8329a803201b987f1135c10705a923d1063acfb19e70e230c68bb943580ce6351fcd4f67d7394c81e14e5346e0b2e17819096be8eff72510","ssdeep":"3072:SeBJc48VgDIAGGhSwL2YF5Og2EkeCELDufCfI2jf:SeDgVgDsQoYuvGxdjf","tlshash":"bdb3126648a0ec55f73c21f126e02370fb4b3892b9e8419a37f4959923689a37f531df","first_seen":"2025-11-10T08:02:24.725559Z","last_seen":"2025-11-10T08:02:24.725559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":670,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/appear/jquery.appear.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/appear/jquery.appear.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-610\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWJXUpLFvzWZLyxoVId6TPK7x1DvXzCCZZ3KoqKyrMMuebZIA5liQrje5IIXaM10HslvUpYYeZb%2FJkkFDWs2LL85CKqpnnPnh18GCe%2Fov%2F2EGwoZn7qeF4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587883a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (752)","md5":"5fbd164d0b2001df2ba85327fc6bab39","sha1":"13e083d8852729d2e6cfa3fbcf3955a28275fd00","sha256":"5d19547b40e94ab90e831bec03fc23d4b894894bb93006b3b3fd8d62e2f355ca","sha512":"5e667b534b3c4cd17e92d4404055e434be7bd07544354a2a1ba56947468799525dd86226e0f1f9d0015421941dcea765c566c1d6a8eec4e1106f2e9bf2064f7d","ssdeep":"","tlshash":"6031ff6b31db3a9556fb703fb61f73155221853b0251e052d9fadd7c39b2d42b803a44","first_seen":"2023-03-07T01:10:45Z","last_seen":"2026-06-03T16:38:17.898261Z","times_seen":2306,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 99c40587cda55a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-03T16:54:50.164121Z","times_seen":337054,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTYa5S2_n0RCaEc6QY0A4jzJ1QfUtsT3ot40aJlxDidGcy5XJFy8gdhvzqXRAyCvtGMBo5NnLsc8dfp9nKKBsItW4nznyFYRHNCTpFLANSYxaGyD-Dzv0wVzictNh7QxHSUQcsJe_PZwpjWJswgVqAYIrv26jScETo0BWgYQ0uKj3oZiRIxt_Yyu5lyNU/s1600/drago.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhTYa5S2_n0RCaEc6QY0A4jzJ1QfUtsT3ot40aJlxDidGcy5XJFy8gdhvzqXRAyCvtGMBo5NnLsc8dfp9nKKBsItW4nznyFYRHNCTpFLANSYxaGyD-Dzv0wVzictNh7QxHSUQcsJe_PZwpjWJswgVqAYIrv26jScETo0BWgYQ0uKj3oZiRIxt_Yyu5lyNU/s1600/drago.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"drago.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 1245598\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1245598,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 269 x 132","md5":"e04079f48b94e989f121ecbe25bdf197","sha1":"7d12f5a111071fcc031f3b4af0961dd394fed7a0","sha256":"269ede05a539a59d0c16ebadd8f5369ae4092e62bbc4b3d21b03a3c0f2180a61","sha512":"59d0e4d444a760fa71823b7070e12ee014ac568e350cc3220289a4e0cc70de3a22e40f251715f92b677485b82f012947eb91d9aa51b9872cfdd9577eff101c1f","ssdeep":"24576:WigI4mQXIeBMGXwXjgnXhhqhKQwTmD6ZepHg3L3cuc:WXmaRMhzgnXhEIQws6ZOHi3cT","tlshash":"7d25336fbd38ddd63521b63c066323901b368491dcc32537e11c3893f5e4aac39ada5a","first_seen":"2025-11-10T08:02:24.728025Z","last_seen":"2026-01-06T14:19:09.758577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":442,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 758\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"0c0a40341658b491a4749eef73c06146","sha1":"1fb695a1776470864425ededd6028fd2770738a3","sha256":"369129c5dc0790e44e137fd49df6cf5f1c179ac5de314154dae56b09fd5b894e","sha512":"30994288608aaf95433f42b221199f0e4695f13b4878557824e4de8fa30481db3a3bd4fdbe410ebb7c0a12da99fa8cd773af5bf8a61404f77f649b97e57b22d8","ssdeep":"","tlshash":"48314173aa10c91d7174c221b98bb08e895e934e8644acf2b29412fe0ad1ed58173e29","first_seen":"2025-11-06T11:41:58.454618Z","last_seen":"2025-11-10T08:03:20.053102Z","times_seen":408,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmxhoY_-37l1_cwheem_JHvlbtKcE0qEikuC5as-T4WhVHEsFsPvJIsDttiER6o7Al3VoA2-Bt5K8Tf3kuHLIYnADGjWxP7G3dFdzAOdfR7sMZvc_dKlBVVprXxA3pcDpBszzPfKGlbryi4x1rAjkxXce9ckXs0HumKgk3MSAFeiJwMOPmJONyGovW3_0/s16000/photo_2025-04-11_16-43-49.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhmxhoY_-37l1_cwheem_JHvlbtKcE0qEikuC5as-T4WhVHEsFsPvJIsDttiER6o7Al3VoA2-Bt5K8Tf3kuHLIYnADGjWxP7G3dFdzAOdfR7sMZvc_dKlBVVprXxA3pcDpBszzPfKGlbryi4x1rAjkxXce9ckXs0HumKgk3MSAFeiJwMOPmJONyGovW3_0/s16000/photo_2025-04-11_16-43-49.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v3d6\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"photo_2025-04-11_16-43-49.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 148166\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":148166,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 840x480, components 3","md5":"458082a97457bf57ffa31d5ad35577d7","sha1":"35f0187cd02f68a77f2a2325df04f1ca2eb4877b","sha256":"346a6025c9e5ebf54f01f95f84d0ead22d5e9518ddc85156dd322266d1983abf","sha512":"896e56ba96fcc7252689ab43cbf672002d871d9456a60a4de77041c057f34004312e92aed25f97ab344638ee5235fd5b3b05e61b3da515b1ed19546ef802ddca","ssdeep":"3072:YAWAhuDelhrYsuqvWA4HL4JurKBZkPX7KopoFT42S0r32oM61:AAYiPDz4r4Ju2QLKoa4p0r9M61","tlshash":"92e323439a1d37a7db0c9c687dd11e8c6c2db4638123a00d8d7e6f27b6499033b1677a","first_seen":"2025-11-10T08:02:24.729783Z","last_seen":"2025-11-10T08:02:24.729783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":272,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEia366c94Yc8OLteL3PbGaKRaQtTxHZuXpL5NDNOnKH41MljskjbF2hKtU9bwtfAnmDfITPuRkUsg_lA-tFkaWPXkvMOfIPXG_Mn4_QEuDULRt3tXs14vTk6hw9rWl8Dlq_kMFSELRSWiaoUZUSxTCKPGIMN0UfzzWVhYAxjfwd3NbSdqg8a0TOMMwkCQE/s1600/thailand.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEia366c94Yc8OLteL3PbGaKRaQtTxHZuXpL5NDNOnKH41MljskjbF2hKtU9bwtfAnmDfITPuRkUsg_lA-tFkaWPXkvMOfIPXG_Mn4_QEuDULRt3tXs14vTk6hw9rWl8Dlq_kMFSELRSWiaoUZUSxTCKPGIMN0UfzzWVhYAxjfwd3NbSdqg8a0TOMMwkCQE/s1600/thailand.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51f\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"thailand.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 50868\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50868,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 120","md5":"2f508f37eda974deeed239e2567cd489","sha1":"0651bb997305e9f38175d07aa0fb0df3e2d8861b","sha256":"8fe282b06faf3322d35460eb1d2d284e284bf05487b207c49c3334674dec8ce7","sha512":"6cf041ae633e095d06f8608bc2463e4aeb7924fabafdbf29542b915822a2e05184e16606babad38f337e69a7c4c81d1c0ca9ea43fc9aca2f36a238450d7d0440","ssdeep":"768:gE7DpamV/1eYlm15ku/TGnWkmMRrZqBGuBiPcD778Finns2o8vDyzXIW+2hUIRgm:t/V/1Q3G7Lq8wuinKrIWK/FpR44c","tlshash":"683302b5cd210c85d8e9749e0458ac4b2f4c5ce2c8a3f6ff95b7f696908803f92de589","first_seen":"2025-03-10T18:34:18.344296Z","last_seen":"2025-11-10T08:02:24.731191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":85,"dns":1,"connect":25,"send":0,"wait":424,"receive":3,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5IeNpS6d_F28-U56oIhrHkz0Ichpv2NYBSU6JrowZdxpaLg7sc4D2V0eKgKmGnGTVZVraY2JCM1IzSoTxwxXPw8Lzzl-8DNqDralC9N5wWZQdZ6HuydMA0zhxLVX0sBfdW70HA-EZgHlAlmvNITuMCNFEWLfz8y2O2e99RACp3gzcEbceHU7gsjiHvEg/s1600/PCSO.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEj5IeNpS6d_F28-U56oIhrHkz0Ichpv2NYBSU6JrowZdxpaLg7sc4D2V0eKgKmGnGTVZVraY2JCM1IzSoTxwxXPw8Lzzl-8DNqDralC9N5wWZQdZ6HuydMA0zhxLVX0sBfdW70HA-EZgHlAlmvNITuMCNFEWLfz8y2O2e99RACp3gzcEbceHU7gsjiHvEg/s1600/PCSO.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"PCSO.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 62756\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"6d0692d88e9324e89d4c12e696f0047b","sha1":"119f906aabf635e796984d2d2dd322bc3ebedc85","sha256":"c38f9533d3ebf4af3ad68b7e43a8251ddbc44758ba589ec5b22d83cba8ca0e47","sha512":"99c8b412035f4a8a8e181384b12c626ebdb8e5e06bbc306e97e3143c569cae25501c2c55c8afaffe787a9c6ccda9ff06e3fdb7f3197e2592ec17b287c306416c","ssdeep":"1536:+wW3FDd2fpFraM/0wDFjWXTCzNK/tEGDAtfEQBoKR7qBulHt:i/6Hp/0wmBEGUt8Q7VblN","tlshash":"255302157ac79a38a8ed8f9d90e972a42bb433ed1e5405ff720e43102f7b51a21c27e5","first_seen":"2025-03-10T18:34:18.2285Z","last_seen":"2025-11-10T08:02:24.731903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":703,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5o791QRDDEjdW_rMYrOGE-dLAyVncvR0i7nTBi4g7mZ37oJARw-xuuORWOHdY1jTfvXTQ7u-6ILB-UJF9Do37nU49Xc90Wkz5ZYQZyYubAYSxCyBHSlOeMrja5ByS6xucqskEc3FtqZfBSHc-ZE0QtowN1TZjbA0zml5kUTwhi3sqnqRmhTo8i9o8QOc/s1600/POLAND.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEg5o791QRDDEjdW_rMYrOGE-dLAyVncvR0i7nTBi4g7mZ37oJARw-xuuORWOHdY1jTfvXTQ7u-6ILB-UJF9Do37nU49Xc90Wkz5ZYQZyYubAYSxCyBHSlOeMrja5ByS6xucqskEc3FtqZfBSHc-ZE0QtowN1TZjbA0zml5kUTwhi3sqnqRmhTo8i9o8QOc/s1600/POLAND.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcf\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"POLAND.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 48831\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48831,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"bd8efc15a85ee4320a99c4934badbe9d","sha1":"d04e99f3a1264e0441208c704070243c37d13fcf","sha256":"d03d899ca8676187467ac429e8fda15d723dec1963581a2f72787e0922e414d6","sha512":"07a914bbdc2a3d54e10e7df13bd44d43f39a9c057cb3662c6b023524523b6081ae7770c3c4b402c847e9f04cdd385e3d7940ef0bfc65740f499af41ce6e53368","ssdeep":"768:oQb/MCKu1nUMOgSySf57imHGiHlcNRbjQXhMESJGZElKogF6FZaThYNt8g0BPfq8:oQbkCD1WgSnkiGiHeNRbj+M/MElKoRFA","tlshash":"1623021daaac3d72d5190d6743f931804156fc9a18458fae8c1863e6bbc8d0bce5d3db","first_seen":"2025-03-10T18:34:18.308722Z","last_seen":"2025-11-10T08:02:24.732627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":700,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/font-awesome.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/font-awesome.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb24-7918\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpJ998f3w0p2PVIMODWsvFvZwWrXU84eYiUxa92n0gp%2Bmi2iHJDkcRL80vWCnsWVhE6pUq7XuO2Z4MVeF0Z%2FV%2Fig7SscTZtqo6MkShS8%2FMDZPKfc9iQpu74%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405852db356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-03T16:39:57.148735Z","times_seen":281469,"resource_available":true,"data":null}},"time_used":885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/jquery.cycle2.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/jquery.cycle2.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-5710\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wn%2Bin%2BLmcYnIiP6xz8Ca0llbUatfMOKJGaFp1%2FnBC98PgnYhyU8gnd0m2iTPQ3MhIYol3FpyviHhNWHndb88IFSlJWbLdRc23Ap%2FbmSJICNL3FVVjd7RPfk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587884156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22288,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22288), with no line terminators","md5":"3981c014980610a347911b3eb292b722","sha1":"a19a589bbf0d0a607557cc93768fa68ec4d9b87e","sha256":"6b41e47a54aefc08aaa3678ed56f5689ddf69b8e8a48e9af8acc200ed0559fec","sha512":"a1e7501a56f8eb568e1c954104a2e0c382d2cbf9ffe386d1ff47374460156e1813374c69250ea17d5fd9f2c8d9d8734504c8782ca09af0b503d69efda13479e2","ssdeep":"384:dKoMqqIIaGwjZufVdJHqktq+3XlTXdE4VzExmRCqfL:PqXysVdJKkNTVCmP","tlshash":"3fa2b728b249396295f328f8733fd00b17f12d776950d6a170e2c7c96e74946b226bf8","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.915069Z","times_seen":2307,"resource_available":true,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPTKNmiuJTnJ1nzTeKhTyxl7VPmozoSRWa1JiO9CUf9nPaYjcHY40QJahl4AT4stFivKPtZIxz6B8H7-CjDI4F0VaIUAVb11lf5qTQ-lhTdP7qcrS2MFNhEA2YyVtQxJMZJ9VZvW5z6IS-ONRFhbAp5bKZlM1VA-Dnq8KY8kgfktYgFUSXvzChuKU5o9o/s1600/nolimit.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgPTKNmiuJTnJ1nzTeKhTyxl7VPmozoSRWa1JiO9CUf9nPaYjcHY40QJahl4AT4stFivKPtZIxz6B8H7-CjDI4F0VaIUAVb11lf5qTQ-lhTdP7qcrS2MFNhEA2YyVtQxJMZJ9VZvW5z6IS-ONRFhbAp5bKZlM1VA-Dnq8KY8kgfktYgFUSXvzChuKU5o9o/s1600/nolimit.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"nolimit.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 94615\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94615,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 147","md5":"9e7c004c0648ec42575d78d6509155ab","sha1":"4e08b1b76a72011e1fbd8609937bce39f3e540c7","sha256":"19a850000bde931a4739b098ee069fe31e27878573630067aaab1adb1a0ff1e2","sha512":"698517fde1b44b989344b71e13273724219b5511e9539f49de84a1b61e368aece60cdc57740b683653e1e77f0b702f073cf1a439c8981cf7ec1d6808801c8340","ssdeep":"1536:1nQmd1f/1bRTvIFCEFQGy96q7rg+w4PfwJdhqXV8lWndfx4W8KXhj1aEt3lnE8Jx:1tB/bzFjJ7rTt2qKlWdfN1Dv1zUPafUG","tlshash":"5a93125f8fe4aa15469d7685afc4c1c584a9cb5be256c8a13e71f8918f7a33803dc3c0","first_seen":"2025-03-10T18:34:18.359427Z","last_seen":"2026-01-06T14:19:09.778882Z","times_seen":3,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":379,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_AE38Rwggx_nlL4qWIFf61Kw-y1mZPjxtn4h6nGgsvEyfgS_IxPWUamsmzm06zt18RZxj1ly9WLoNaQypvFvDL6HtX7xUR6C9w9cIOxPBAmhaOoNHHg81FMuI8Qubb0gU3hGK23c4uN7mZpbc4GubTGOveASrbJ8hjkpaMArEzgLkU_lhYcSNN4BDiaw/s1600/prediksi-rudaltoto.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEg_AE38Rwggx_nlL4qWIFf61Kw-y1mZPjxtn4h6nGgsvEyfgS_IxPWUamsmzm06zt18RZxj1ly9WLoNaQypvFvDL6HtX7xUR6C9w9cIOxPBAmhaOoNHHg81FMuI8Qubb0gU3hGK23c4uN7mZpbc4GubTGOveASrbJ8hjkpaMArEzgLkU_lhYcSNN4BDiaw/s1600/prediksi-rudaltoto.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v8b\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"prediksi-rudaltoto.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 17394\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 154, 8-bit/color RGBA, non-interlaced","md5":"5301d2b942137339bdf070086c2698de","sha1":"957b88be690e0d3846fc594527774d674f78fd99","sha256":"fc339d20ac48db517e6cc9797c5e88f8b3020c18add5f1c6a276225be54f83c1","sha512":"3d222805d71447c7b753b8ec2870985fb188f6e333b25ac680e476b29e173147f6e08a53061425f958e30f6df6c09ee99e9e066edfc4e5773cab2818b4ffe866","ssdeep":"384:E57djZqiUXimnd8eFZlMm5Lf2fggqAH+3Ng8VJmI5Mm:u7djZ1UXiUFFv35b2fgg1H+dg8VJ77","tlshash":"1272d0410e36984597e7a76ce1f23f246124a37886ecc0a3d7cf325a85c1bc5962469f","first_seen":"2025-03-10T18:34:18.353053Z","last_seen":"2025-11-10T08:02:24.736196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":631,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.B-chZHUs.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.B-chZHUs.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOEktb0YQv2gGFefJitNLEat55Famhq3mI7KdNiM8KyXj18qlg4DjoGWCAPX4KuskgQLujdTmvjARBSq6A\r\nx-goog-generation: 1762425812792157\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 310\r\nx-goog-hash: crc32c=O0b13A==, md5=2RsC2U7Tz5viUvWunCaQ5g==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\netag: \"d91b02d94ed3cf9be252f5ae9c2690e6\"\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-length: 310\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":310,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (309)","md5":"d91b02d94ed3cf9be252f5ae9c2690e6","sha1":"07929952caf1cf7f02611eef2031580d24041941","sha256":"292959df1482244a7039196504e1af92839beb061f6bf5ea6e44dcc939f53ca8","sha512":"fb715838171a851753fa7afa62fd0ea772e0837d5c7b3fa10e34b4d1d4c50a688d67b8cd97310deede839fb52478f852ed50e4c6ada59ea2eb791deb16da8fa3","ssdeep":"","tlshash":"f5e07ddf60d2f0f24385bccc45209181d368dfd01fad81e0c02c5f9057101828836ec8","first_seen":"2025-11-06T11:41:58.449998Z","last_seen":"2025-11-10T08:03:20.080767Z","times_seen":417,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daftartoto.co/img/linkalternatif.png","fqdn":"daftartoto.co","domain":"daftartoto.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daftartoto.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 01:18:36 GMT","end":"Tue, 20 Jan 2026 02:15:13 GMT"},"fingerprint":{"sha1":"A9:7D:CD:60:91:DC:C5:17:65:B1:37:0D:31:82:FD:6D:51:3F:33:57","sha256":"7E:3F:B5:B3:6A:12:04:DD:7E:14:01:E4:0C:D1:EF:E2:51:38:D4:31:A9:F9:21:F2:24:04:6B:4E:E0:52:CF:F5"}}},"request":{"raw":"GET /img/linkalternatif.png HTTP/1.1\r\nHost: daftartoto.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 8444\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Nov 2025 08:01:22 GMT\r\nlast-modified: Sat, 04 Jan 2025 02:39:59 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrAdy0%2FtSfyLGR353Ex0DKxFB%2Fx05rmScRdYoBNY2s52s1exGaaqN7zj2d30p1u4HnWzVEnNhLBknDzR%2B8naUvsRnmZQu6JQSS3A52A%3D\"}]}\r\ncf-ray: 99c40585fb91723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 190 x 42, 8-bit/color RGBA, interlaced","md5":"0022e553f0a12036f4077fdf2ce62d94","sha1":"3b60bc3283c00f34ed9e619797a220b9b1cd0a74","sha256":"d7aaf3dce34f60c8f25c53db35ff0172e8347685b8ffecc3bfa0901ec0a04b97","sha512":"bc43299d2600b50979f0f12a57632d913e1a0b98fec68abae992ffa112b8a974e5d50efe0bddaab1ccfc873bdc7e80efd31b319b29aaf87487555946c80ce43b","ssdeep":"192:OS0tKg9E05TFvMN3A/A648B0o5ae2S24olrOOC:CXE05pvW0A6j12S2BrON","tlshash":"7302bf2a2a2cf04273cc3944dcfc1507a278ef9c856236bcc58211df565581faed18e8","first_seen":"2023-11-01T03:48:20Z","last_seen":"2026-01-06T14:19:09.751857Z","times_seen":11,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":58,"dns":27,"connect":3,"send":0,"wait":515,"receive":165,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKiHKdNOp9vPMhHCZ21xTPkHGz6DgHoHF-gYIcdk951c0wBPrhppNU_vm9NJFhvbss0fkqHMB7VpiMyD9FaUdbRk54o8_6bYcn8nRnwjZOWohJn6JU8e9OHs2ixoqA2t-B4KgLuGDA3thzQgbuvlXozl9rgXlwtAY20RA8T7E_wVEkptTL1M6Bam_J-yQ/s1600/3d-sh.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjKiHKdNOp9vPMhHCZ21xTPkHGz6DgHoHF-gYIcdk951c0wBPrhppNU_vm9NJFhvbss0fkqHMB7VpiMyD9FaUdbRk54o8_6bYcn8nRnwjZOWohJn6JU8e9OHs2ixoqA2t-B4KgLuGDA3thzQgbuvlXozl9rgXlwtAY20RA8T7E_wVEkptTL1M6Bam_J-yQ/s1600/3d-sh.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"3d-sh.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 1229239\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1229239,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 269 x 132","md5":"7c739adb31cd801da607dc97280e5c2a","sha1":"66a98af7a1f1b0c016b315bb93cd06d6654a3b29","sha256":"0704493acb4e2284025b8096a131b56cb6474b4b629b53fbf0775400d80267a0","sha512":"d992fcbfbb75b69104a915e0bc5e6d9787396f8134a3714d5433de23d2d05ec7b15eb86ec59b05fd5d7843c4b3c4d2d7712cdacc7f122a06fd212149534b1e71","ssdeep":"24576:yGJFTuw7sv8VIxNCQ/C83nA+OayBPaHlfxYyco9I68Gg0m8Axo7x0:ymTFsv6QA20Ul8x8ne","tlshash":"6925330cca6e027993237cb3351306999d7ecfec4c61832b629559b5bbc237b64f5a06","first_seen":"2025-11-10T08:02:24.740558Z","last_seen":"2026-01-06T14:19:09.760794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":422,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFyrA1UcQPaKHwUk8j72t_CB5ae8sfzrE9wV1J2XuJ7_Jv0Drnnoz1YCmkSDj_iOK_NnDhvb74_w5oOp8UPy4OjeRwRLXpLm-tSJeRqLOn_hGxTGi-OdgySzScL5HBOzB1EhH0ByukkK6Yz27JA6ffOT92l1np0uCb9b9TTw56Felh3wEp2sunXwF1GXo/s1600/mandiri-online.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhFyrA1UcQPaKHwUk8j72t_CB5ae8sfzrE9wV1J2XuJ7_Jv0Drnnoz1YCmkSDj_iOK_NnDhvb74_w5oOp8UPy4OjeRwRLXpLm-tSJeRqLOn_hGxTGi-OdgySzScL5HBOzB1EhH0ByukkK6Yz27JA6ffOT92l1np0uCb9b9TTw56Felh3wEp2sunXwF1GXo/s1600/mandiri-online.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v13e\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"mandiri-online.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 8635\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8635,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 145 x 87","md5":"5cd867c70fe6ff6ae69cdc76e8d82240","sha1":"90ccbbc9afec22e559a9fa7962fdf85761caf6e9","sha256":"4f2e5b5b245d4280cc83d46e32a225e4642bcfc42f061e24ca8ad48ae4d43042","sha512":"7a14a8d089d97e0d12c3fc3205d7055a82b5ead953a08dda0229f8ce0c6d2520ae21865888f0cc1b2355a32b1f613ba775f3027f29021282ebdaa0ccaa1cf647","ssdeep":"192:27FHYaCrspyvdWw3Xv/tJt9QLut0FxeYc65oTZrr+HAY:21Yavpodt37t9GHbeiGTNr+j","tlshash":"bc02af0fec63b249616cfd051af39e6eeb5001b41ee41099e2985c96439927c3627a67","first_seen":"2024-08-19T20:59:40.105064Z","last_seen":"2025-11-10T08:02:24.743149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":621,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvnMpkk5WCwxvrfD78HdJyIHPBBKP27bMFS865W7gPiLrqIbhBw0imBvGzHJYR8tBFJO-Ss1cb6a9V1RnLrqVYfeFHuEzy322RND_P1Lx6zceEmSR1KeKWaE1DxSQEVpZWGN5n6JqTqqtlNh1_WV_DfpmV5Sf0ua6UYzoF21kVLOMckkFS8P4Uz6I6x4E/s1600/SWISS.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgvnMpkk5WCwxvrfD78HdJyIHPBBKP27bMFS865W7gPiLrqIbhBw0imBvGzHJYR8tBFJO-Ss1cb6a9V1RnLrqVYfeFHuEzy322RND_P1Lx6zceEmSR1KeKWaE1DxSQEVpZWGN5n6JqTqqtlNh1_WV_DfpmV5Sf0ua6UYzoF21kVLOMckkFS8P4Uz6I6x4E/s1600/SWISS.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"SWISS.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 49783\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"5f8fab72bab4693191f9a1059d4c8455","sha1":"106f8137910c751a078986d3c5a3a290763c63ae","sha256":"64dcba2e00cdcb7bb8bb10f3380dfb5be5adf1e1ae99a0b8e723a74d755e2476","sha512":"2e815ac6ef3e4b6f5963c05489a5c02222ce08610749a5a537acdd3059a258f788258e7029a65d0da5e2897804f9d95c27226f3bca142842772a695d405b4d43","ssdeep":"1536:5mMCAcgzVFbOQJX5CbdoiCFWVy0qO2OfLC8OWCmjl8N4:bC+V93JpMofDO2Ofm8D+N4","tlshash":"842301c0bb82bea677fd070dc255c769a2fbe0451eae50c1c8b58851f22eb45a6146cc","first_seen":"2025-03-10T18:34:18.260968Z","last_seen":"2025-11-10T08:02:24.744406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":614,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/vendor/bootstrap/bootstrap.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/vendor/bootstrap/bootstrap.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 03 Feb 2025 03:25:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a0370f-1aaeb\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 80\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d3Ji0aJzbaEHSsSPCpzpHfy7oZK%2FaUQxK7GpJGDzvrO1j%2F5jSRo39mKTQcUyfAf58vbBPyN8CSIr%2FOGtgNSrw6mc7dEOltk0pELSq7vMYvCLfaflEmxA%2BSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405852daf56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109291,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0a79db938c7418a0f16560c8758d8d4e","sha1":"79b10b3baa06c8b73b986187521e4a0d6766f938","sha256":"1100977a241133f42972e197c28a12254b88b7b512eb3f4a8d79f3d7ef8a0084","sha512":"3c026bdb70c1b28ca42b52d5e6c77e9ca1f5f63199ebfd3527c92f3bfcaf0b48f0b5e16ee88bda50ddeb5795084f57c3685a50ce49c66818cf31c45b302452c8","ssdeep":"768:jbGxwUkBUmlpztzuRdvGN6eABkdIUIbZbnbJN8gwaKNhL3tqNhkRQmNaw:kwldERdvGNIkabbRk3chO","tlshash":"c9b3d7a0f11031ea7223c55a71d0ed872619a053e66b4fb7f22f25d88f895ca1773f1a","first_seen":"2025-02-03T12:58:18.829121Z","last_seen":"2026-06-03T16:38:17.883884Z","times_seen":1801,"resource_available":false,"data":null}},"time_used":1293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":424,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/azl/bg.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/azl/bg.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/assets/css/azl/azl2.css?v=1762761616\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 176779\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:09 GMT\r\netag: \"6749249d-2b28b\"\r\nexpires: Wed, 10 Dec 2025 08:01:24 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8c1w%2FjAi36qRWbWtkplPjweybncvpbpdx%2FbQQpZMgUwYw32vWTZu8kJuT1CNgb3GojDTlQr0KYOEkv9zRxXrFkwd%2BuOZn3X7bufA2aHsuNmr1sjgYO14uM8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c4058dbe1156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1029, components 3","md5":"911bd7396450607f03b73dd79882eb28","sha1":"b63d378bfd09af4a51d6841548ec5e3ea5e93fb3","sha256":"93eb3c4369f0add601aff2275647e63c9b302cc66f79bede475acefb677ca0e8","sha512":"20a5c451ed64a9e8d7363c9a1a6cc3ce92ff3e6fee79abcf3304c5f5c4977c2a09f7064062d8fec6d261d5d280b0897b41f43bb6c271b5ef2e11584f12e940cb","ssdeep":"3072:CpIrOvqXGD70BZgV90EQI7GjZ+H7O8yjod/3z7HrDGv+jHceIhRTJHdfCUyv:C6ivqc7+W09P8H7OAxz7HeqkZJHd61","tlshash":"4c0412f4e6a977f7f030a879b16b07845ac5d4e49b4a47be23d0254dd3283f38a98346","first_seen":"2023-11-05T12:09:26Z","last_seen":"2025-11-10T08:02:24.746467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":563,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjl68gD_3jw4JolH_Uzbl3VI98gePbmZItnpp7Rav8DkVvcCIicPZSORdKGcrcZ-PFhGevz-yRHV0AUgxfIR8O2-U64dMowYRepoetQGFjuVbNPorm-YlYr-1VopHamS2VgJRJwmCaqThsGcMCpN0C8RlVRNtwEKjtMrVRAQsmJKeZDdHNq5OWFb2S3gxU/s1600/FLORIDAEVE.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjl68gD_3jw4JolH_Uzbl3VI98gePbmZItnpp7Rav8DkVvcCIicPZSORdKGcrcZ-PFhGevz-yRHV0AUgxfIR8O2-U64dMowYRepoetQGFjuVbNPorm-YlYr-1VopHamS2VgJRJwmCaqThsGcMCpN0C8RlVRNtwEKjtMrVRAQsmJKeZDdHNq5OWFb2S3gxU/s1600/FLORIDAEVE.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcb\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"FLORIDAEVE.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 68021\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"62e9d9d61de954b4e7f2329c75d0375e","sha1":"603b7cfd41a807ee1ef48fb2350212020f003bdc","sha256":"d68658e41d2385d88159c88383c43bcad35cb28db4e36305b084827930aa4b6c","sha512":"baad3f8ed8ff9456fc62b49134820c9889d41c8942914173dd7e68b535ac1d542cec0e8a54e6b374f384c457232f07c50b554de2356f44ce5adfb71745411d4b","ssdeep":"1536:VDdHxhVVbIcFnB+qt0YQ1eWq+qGOqtiOGyRxFpq2F0HoXioctuwp:RJlOIBLkMtmYyZpqW0HGioctuwp","tlshash":"c46302ec8db9f86a707d164ffe1d05d0c943f41aa6af0660f079d438b753a5c18c98a9","first_seen":"2025-03-10T18:34:18.262865Z","last_seen":"2025-11-10T08:02:24.747345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":709,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0_pmaOMNHTJ_w3C5p38UsmnBRkC-mm05Na7qqnnhxvoWYe5bFK3i5L1GJc1NSJSazS7nCMOjT9b67Tb5lGmQcURfXeUpUP-gGUl4I5I-w-vuNOfnuo0Pl9R-I2XwcIAgeQmEFdQ7ga3K0ULH3OS4USxCTeYV4FuACg0Y6dE0ruXm6yHAVXhVucN5gbx4/s1600/toto-macau-2.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEj0_pmaOMNHTJ_w3C5p38UsmnBRkC-mm05Na7qqnnhxvoWYe5bFK3i5L1GJc1NSJSazS7nCMOjT9b67Tb5lGmQcURfXeUpUP-gGUl4I5I-w-vuNOfnuo0Pl9R-I2XwcIAgeQmEFdQ7ga3K0ULH3OS4USxCTeYV4FuACg0Y6dE0ruXm6yHAVXhVucN5gbx4/s1600/toto-macau-2.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"toto-macau-2.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 70918\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"41692bffedd1f20f830561341a1ebada","sha1":"4477f5790cebe0f81c1205ba74059cd646410430","sha256":"9bad39925343d4b44d25941011f46adc1994a5ef794f33d23a78f0327c80909b","sha512":"f7f0d934390f18cce44e4b39ded18121528b0edcc6904fb6e41c9fcf46bce56120c4f70502064fbc18af58bc9eb835db5dceead8189020a33250bdc12853bf8e","ssdeep":"1536:+oS0OVjV3m+8y1kGrlHjuU8DgJ4dOON4Hx0NV03AEuYBPc3:tijV34GrlDIUGNV0QEuOc3","tlshash":"d96302c1d64243fea186d84191fe7c41cd867d054eb6232e9263a6ecfb64dac81c2b73","first_seen":"2025-03-10T18:34:18.329218Z","last_seen":"2025-11-10T08:02:24.748214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":699,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/panin.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/panin.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 7544\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-1d78\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVPWAHIYpGteIqK3FSeaOqq%2BqDc62csPNKqdIsYLDtmmggTeFgMUnM%2FYaYZnWqyPz0qA1CLdmlw4PMer9GvIDPLiqhoBg1oT7gN7zcvMBKGGPOeccaiQYQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405871fc356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 100, 8-bit/color RGBA, non-interlaced","md5":"37fa040c2929dc9063943c5ea2ca3622","sha1":"56fb45e917da5788ca7f767daad839f96d8cabef","sha256":"cb5d8a5e20e3aee1333d24ce82fb36025b895146dd7f1a602cd921d828e1fbcb","sha512":"4f582660270837c6c6b08b9e36ddf745bdfcc78c2e3b2517e3292a825c7699ddf9c5f9d7c120e2fcf204ccbd667e4c7ce22fe53a0c511c05506775cf31885898","ssdeep":"96:TX2/2D1siKZKj/d/NN0qDzh8aV6x+JalPWDNNgqVjIycerHuD3cXX566E/6Zo:TJ5xKZU/juSdV6iOuDtL4cXXc6EiZo","tlshash":"12f1af5cb99171e140624af206fc8162fd3b1cb642d9f1ad70a6fa9da0c153512be2cf","first_seen":"2023-06-01T16:10:36Z","last_seen":"2026-06-03T14:21:48.015551Z","times_seen":742,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg01-x2TWh4qDMYpRS0rybqHSn-SZlfcx_RDJTifFYkQKcelfdyRNWIBgvf2bvPEp3F-q87oszHBSmXM-gUMLHakZj1hK4ykMUKMiAlSuQXZNAladw9Ot9Bh6X-gQmgxnN8BkKonFUl1RqKO3K8K2C3H9zBxHYsdEpd5uMV5CkGOdfCZMWXnk5BFwK9UgQ/s1600/OREGON-9.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEg01-x2TWh4qDMYpRS0rybqHSn-SZlfcx_RDJTifFYkQKcelfdyRNWIBgvf2bvPEp3F-q87oszHBSmXM-gUMLHakZj1hK4ykMUKMiAlSuQXZNAladw9Ot9Bh6X-gQmgxnN8BkKonFUl1RqKO3K8K2C3H9zBxHYsdEpd5uMV5CkGOdfCZMWXnk5BFwK9UgQ/s1600/OREGON-9.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vce\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"OREGON-9.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 70276\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"08cfc363b4d83bba3d567c82b4bbb2c8","sha1":"98e3ab4b8d1d4ead28344ffa0ac95781128c5316","sha256":"1457d27d00e55a7a9751bd65c0d6c18733939beaf4f1ffdee09fb59809be6d3f","sha512":"b349fa033c4b7198f9a59a916dc8ca05ac4521ee2c1d73dade09c19ac744430fd349a59bcbbb9a0ce666d095b03fc5d2fbb53fe24952a8e3cc2c44f01e5692d0","ssdeep":"1536:Hawop1wEb1mF+oSF4RMRzQXp5QpLRcr+KoraCASYHLf40Ob:H7oJb1mFhScMRUspNY7oPtYrdU","tlshash":"586312b19c92527dcb6f0ad0c5ae04a767d43e46c8cd93a928d1bb5e78a1f6f0b001f5","first_seen":"2025-03-10T18:34:18.255496Z","last_seen":"2025-11-10T08:02:24.7501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":658,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/owl-carousel/css/owl.transitions.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.transitions.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-e73\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pX1%2BNntmqjyne9Homs%2B7qrysvRA%2B%2BUQASGT9%2BWAnSWd2CQaqUgzctMcDeOD7z2%2BloRTHBFSXd2WMxPmfIUIepypJrwmuuCuLfMwRU2Ca6yt6Hxiq54mzubw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853dde56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3699,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3699), with no line terminators","md5":"d3cae09d3a2a739d57ba673b3c84db71","sha1":"01ad3c7c272be1c23a796cf247bc1b689f9e7b7c","sha256":"df344411eb3c7585c6398e1b38475fcc3040ccdc4007ed707734d46e3a50843e","sha512":"66f617d0be9b552b5de55145950a2a325e665e218324c825e45eefc8acc8ee186267caaafbb6ed533908b3b66765179a8c96e3be762e234c0b6a969e0ecd6e6f","ssdeep":"","tlshash":"44711a6e41961348d09b0780b7d8fa980e5c89d668339dff31d9bd8ac7046de13f9a1b","first_seen":"2023-04-06T01:43:05Z","last_seen":"2026-06-03T08:56:02.841086Z","times_seen":1598,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-totomacau5d.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-totomacau5d.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8889\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:15 GMT\r\netag: \"674924a3-22b9\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 78\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyTNQk5UK9rQgRohK4p3KuisQZ05yIYigfjvA0M%2Fah9N6hA5wi%2F2OGM%2B21844lSxJtVal0%2B%2BX9m1DcikFO9DrpNndE1Tzsc1iz%2BBQPvkE8Le6MoHyaHQ6cc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c40586ff8d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8889,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Converted from  WebP to JPG using ezgif.com\", baseline, precision 8, 210x205, components 3","md5":"67fd9d3808352cbbf6ab4e5e95203d96","sha1":"6183b3579f6fb6d0607e424ca11269f3c74c2d8e","sha256":"157c3fc50a9a79068835c64a4a57ad51f33cebff9c177e171e632d1e99134b84","sha512":"fcc42d43f3be3791b786e8e66caa3e3ff74ddf162a5d1fb2e409026d8eb05204f9f6373425f1d3432e50acf21b84bdace44861c7eaf2c1849b9da1f14a74c96c","ssdeep":"192:iytawtgRLxvmi5rF+WIKM63JP/iTL25zDA1mzM6nXOUddP9Io5vnHPqYFMU6kUN:ihw6/vX4WIKM65qTSiR6neSdP5RHPqYQ","tlshash":"9802ae4658568169f8ab8e3b683f53124e1c7b8bcac1786d153814bc02e3f959fccf05","first_seen":"2024-04-27T15:45:17Z","last_seen":"2026-06-03T16:38:17.983235Z","times_seen":1646,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-4812\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Cba2E7nt3rdvvUY5Q0cMCtXKJ3UsONW%2FKzQ0K1XRB7%2FAvOcQZzObeEo3vin%2BfCy2sh2tngyxPLWIyqpfyibYy8%2BhxOjBGWNYVyK8%2FF8ogHLYzdX5MVSsK4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587782656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18450,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18450), with no line terminators","md5":"2015fe4e8911558500fb094aac79383b","sha1":"2d1e5126c8e3386153082b98e841d7a03435d975","sha256":"bf2d2ce2803063fd72be8165d5fbbc700e24dfd6bfcb351f064367a90db9ef4e","sha512":"d6e3fb657e8dd62f942f2f59000ace81b36ce43ebcc8abda4018c1d73b155b3ce2e83d33dc1ac86cfe81b0d76100137197b905c1f87e9f2f194a4e2eac3013dd","ssdeep":"384:fD9HWD99TpJGd+iesmAnxpakrwHVXHh1p7l8dVNOpZpMOUROOHEAk:fDiAebALak0HVXHRl8dVNSpPUR1HEb","tlshash":"ab821ccd7253b11a8397707a607f420ef23a5899a8184850e059c9fcbe74de8427ff6e","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.862089Z","times_seen":2328,"resource_available":true,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":859,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.al-9NYxR.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOFXPzBYeKEc17KR41OSyCYnwEbvSYlPcLJBI-AIkiU7tfnEoiDK42wz5MA8J51FP2LV\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\netag: \"4a073c5805819d74eabd3e843372d502\"\r\nx-goog-generation: 1762425812243354\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 236\r\nx-goog-hash: crc32c=6eM7Vg==, md5=Sgc8WAWBnXTqvT6EM3LVAg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-length: 236\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-06-03T16:38:28.834806Z","times_seen":15973,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/game_compressed_ic.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/game_compressed_ic.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb24-996\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhULDekW9ILEn3taySWvfcfoINn%2BxF0E%2B0qC0Yu3NGK743MgWUIiuKU39iA3HNmc47QDfslxYMToo%2FlDuIFKk1fJ4bXLJ21j0XSMx1KxGJwvQ%2B1m1qpaSv0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405854de756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2454,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2454), with no line terminators","md5":"0bd86602b88b341a1e8dd1736a99ae39","sha1":"f7c937a26328c981dd6741251c0d2320567644d7","sha256":"544b151ad8c7487ebcaa8538d1c3c18b2a100720d6fe9ef6ab74fa93d5c638b6","sha512":"959fdf89036b67017b7d0a0d0bbadd89a7d44aed33fbd4aab84c5710ee2452509a41b3dc77a68865fc620fcbfb9629b2c1f15af04d95099b25069a9077e47585","ssdeep":"","tlshash":"e05124226dd0e4ae346f95305931d6bdb349c84be2174e7cb62fa57af60c29d24327c1","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-10T06:46:06.30211Z","times_seen":1270,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/ovo.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/ovo.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4578\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-11e2\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOHC4OvBZgPI36DrSlQHwueHhRgfO9Mk4sWvAN67Z4HOPkW5yW8Bft1g4cllmhHx8ZksbogX6sRikeTKrQ9kxIGbI2UBDCFeKeYOdp%2FSGLVanUXLijv%2F4Ng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405873fe256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit/color RGBA, non-interlaced","md5":"9a8ceefca77b6a4f356bf139e59065b7","sha1":"fecb95c6ad2fddbcf2424b60a31503917c1cbc02","sha256":"71dfe3342d07e446916111fed9de1724bdde56c963c1b2573b7ec643e9f26e50","sha512":"eed75a8454ae4b3f6b926a1fb64124c1308f053d77c7d797767093a13430145cfaadbbfa4c85f971cf0339150077253a4b261f4d7cfd5d986fd854b7172981d9","ssdeep":"96:mZYR2M5uAeJqRaQ8IiwJ7k64Hx7iWtwopCUg2sl:mif0AeGaH4ivWC5g2sl","tlshash":"83919fc6eed04c4326afed21d3eda07967474c98dcf3b5623cfa88001d3a29446e9497","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.164803Z","times_seen":1830,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daftartoto.co/img/whatsapp.gif","fqdn":"daftartoto.co","domain":"daftartoto.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daftartoto.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 01:18:36 GMT","end":"Tue, 20 Jan 2026 02:15:13 GMT"},"fingerprint":{"sha1":"A9:7D:CD:60:91:DC:C5:17:65:B1:37:0D:31:82:FD:6D:51:3F:33:57","sha256":"7E:3F:B5:B3:6A:12:04:DD:7E:14:01:E4:0C:D1:EF:E2:51:38:D4:31:A9:F9:21:F2:24:04:6B:4E:E0:52:CF:F5"}}},"request":{"raw":"GET /img/whatsapp.gif HTTP/1.1\r\nHost: daftartoto.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 52348\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 15 Nov 2025 22:30:29 GMT\r\nlast-modified: Mon, 12 Aug 2024 06:22:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 120653\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZxcxzEBYfrTNqVqnzPcEE43StVlBOHPgCrSH8Khql5LkTaKVyMTDfVka2rYZNBsKjev1dkrbQ4DqyCrqg0EGTZGGN4HnoUEQqBST64%3D\"}]}\r\ncf-ray: 99c405877fa0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":52348,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 194","md5":"2650fd94734b152d3799a7d693470b0a","sha1":"211bf25c88df21627446d5dcdcd767c51d3b0477","sha256":"1aa3598e3effa3c9be12f72b0b383b47e0b86c5e284a1d8fd204b131af1d9717","sha512":"632a5d9905874b4165f8c11c2b6aaa5cd3110fa1fb5c3ac5c845a5802a56a41803fcfeca582b45bbf53c4e0a05fab983d83f1b6ec46b0ec214254277341a4330","ssdeep":"768:Sr0GNM/mszlLiwQTcbP/WBMcAziiATjvQ/lC46bFtjJUE52iwQT9nfOZnfYrOnfz:vZmsBLJPeBMcAITzQd/+Z2WfafYafz","tlshash":"5933f1d74a6e0b88297d18ee7c5a66dd82fee02f003db415c2223d1c86d71548dfabc9","first_seen":"2023-05-23T14:47:32Z","last_seen":"2026-06-01T10:23:58.496274Z","times_seen":169,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLi11Mvtb0F9k3s3J3N8UuUpBM519ZC9LgRJ7dlex9r8i-7kNl-Ul8XFq-vkaRGjTCtPH1HbeDvc2ks-bdtX29-ZKDrFMJWtodTcgUZpG4Sx-4JUdGzvrMFDWrUUwY3toJATSeNwjn54LkCnKBPRzDuhzi5vSepHfUckJNxRL2gjkNrSqtCoRUrEDAgRwsQvVCjZbRyFTLRNyDmT1a1boZV/","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiLi11Mvtb0F9k3s3J3N8UuUpBM519ZC9LgRJ7dlex9r8i-7kNl-Ul8XFq-vkaRGjTCtPH1HbeDvc2ks-bdtX29-ZKDrFMJWtodTcgUZpG4Sx-4JUdGzvrMFDWrUUwY3toJATSeNwjn54LkCnKBPRzDuhzi5vSepHfUckJNxRL2gjkNrSqtCoRUrEDAgRwsQvVCjZbRyFTLRNyDmT1a1boZV/ HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: script-src 'nonce-nSjttRg8zAM1EUR4_026wg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerImageHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerImageHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/BloggerImageHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.BK5fA02d.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.BK5fA02d.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOHy2SCinBUvFbG61LR1ZmOXsb_6NsntTB9CuqUtaH0F8va0EJzhZddQ5IMElrm9A0TQ\r\nx-goog-generation: 1762425812227423\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 4900\r\nx-goog-hash: crc32c=3Wo+Mw==, md5=f+KoJpy3FN3yaAYzoZ6++g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 2033\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":4900,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4899)","md5":"7fe2a8269cb714ddf2680633a19ebefa","sha1":"60ce7fa928a8e2835ffc1f1fe6abc7b653ac5047","sha256":"b346f9b10c26de88bf052c3311d754d310e07317e2bd58a1ba87199a095f68d6","sha512":"dad12adf43cadfbb8e41ed49ac47d6c19a8bb8e51c5a674b3308167ab35cd0b3ddc03e944a9ef39783a1d4e23cc435269867fc7be36b6df0a3ce37874a19b27b","ssdeep":"96:q5ziimCKAb2MLADeQA6Ob1NlTF3DM3maas1pFxRInNCzaNkQyyZFBXfFBXoQFddo:sziNA2CAHNgB3D6cu0NqaNkQP7BXtBXM","tlshash":"fba1c7bef365f97097ea8ce5e5143043ed3716a8b8ac85b0fa5c4e55214d2889122fa3","first_seen":"2025-11-06T11:41:58.466229Z","last_seen":"2025-11-10T08:03:20.105141Z","times_seen":411,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyWO70n5_BGuFSoHxR8Cl4-52r3Mjr_JWKGRTcau7WAoMS3fdaRTSTQ7LLjStLJBZ6ByZ8VOmYY8rbtSEedofC2p7FewT27OyISAs1S0eVVr5ZmotoWuJ5cLumx-j5IxKsUFYsXov7Py1aDLDnAO1cKoZ0OAoV2lp7W38DR4av4DUQSL2hhevIfDVFJuk/s16000/photo_2025-04-10_21-56-37.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgyWO70n5_BGuFSoHxR8Cl4-52r3Mjr_JWKGRTcau7WAoMS3fdaRTSTQ7LLjStLJBZ6ByZ8VOmYY8rbtSEedofC2p7FewT27OyISAs1S0eVVr5ZmotoWuJ5cLumx-j5IxKsUFYsXov7Py1aDLDnAO1cKoZ0OAoV2lp7W38DR4av4DUQSL2hhevIfDVFJuk/s16000/photo_2025-04-10_21-56-37.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v3c2\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"photo_2025-04-10_21-56-37.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 149145\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 840x480, components 3","md5":"0b02dd04428875a591700e3d46f4b062","sha1":"3753890f9648d1eb4455ae8b45325f1d0d66f775","sha256":"8fa87078940c89c19c5b961931735a713db97edf9bd7eb4495c74e0193e42b11","sha512":"e2c64d5b0254fdcdc853cd2f5172b7e4650e46a53af9abd224f5907acea0af3f9dbd3bbd0c169514cbc09891110a22cb053915290954a354d7c4168f2d8ccac9","ssdeep":"3072:gSXNJlyit0EQZxRml0pqM2244aZ4oVTKMdoA4XXL8KJHI5E:hdJkS0EQZxRmeL44aW2lf2X4K1","tlshash":"54e3122e20fcac05693a65eb184f531d873759478c508e7ab78c45e0dc773a62f68ac7","first_seen":"2025-11-10T08:02:24.762047Z","last_seen":"2025-11-10T08:02:24.762047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":669,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/a/AVvXsEhMHEW_Q9L1TXZ2UYwWLBf04MI-5lbp9wRAbontbK_-5yMFUvZkKc5v4dkQrB_WaoFYizVlaul1E8TpZAaSjTlSeSXK77I7399_BkScZhkxl22uWbmayPIskFOKBKPV4V57HP---XBwnNmKLM0kewnU5SckZxhdy1DYXIQai9d-Gx2IvrjCR3VLUBOUx_I=s16000","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/a/AVvXsEhMHEW_Q9L1TXZ2UYwWLBf04MI-5lbp9wRAbontbK_-5yMFUvZkKc5v4dkQrB_WaoFYizVlaul1E8TpZAaSjTlSeSXK77I7399_BkScZhkxl22uWbmayPIskFOKBKPV4V57HP---XBwnNmKLM0kewnU5SckZxhdy1DYXIQai9d-Gx2IvrjCR3VLUBOUx_I=s16000 HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v304\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"rudal-38.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 258027\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":258027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 840x480, components 3","md5":"e43ce9b86a4f5f2bf1d85318ebc752cd","sha1":"b375170bc82d2eda9c32a82acd887f08f3499b1e","sha256":"eb03e1fa703be2bd52b242a2023fa87584ab85c5da266b95c553163484b7c066","sha512":"bc5004f4016630de4e8589f9b0405d90a7d799299a530d90b0d8e8f6608ef9ccb3d5cb224bc5dbdae90c6ed92c3fd5ea700b632d8b0098d2553914365831a9f1","ssdeep":"6144:1mNTYgDs5Gmbod7H4iqXx7StIT/dm5eTn5y9sM3E0:iYVvXx+S/dm5ynQ6X0","tlshash":"3544234167b909c9a58f4871c6bdb53c1af3da76c510955bb34eb608f31f18cb86a08f","first_seen":"2025-03-10T18:34:18.278452Z","last_seen":"2025-11-10T08:02:24.764403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":619,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjC-bd4v39_Sq3shvNBpzzOw59zqgVMW3Ub1mG3ONcee7A-WGhL9gURnvFtj9oDtLNBUz5eeP77qMcbNHBA9ClnIn1Xb3ILtAei0DUm-kOvWm5rF3KUxqvUJEDEJSNTGaCv9bfpv9vflN11XYHCCvBHl4ImDWOKBTSBS_r3Iviat_pM3zBawrSTMUnmP-o/s1600/habanero.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjC-bd4v39_Sq3shvNBpzzOw59zqgVMW3Ub1mG3ONcee7A-WGhL9gURnvFtj9oDtLNBUz5eeP77qMcbNHBA9ClnIn1Xb3ILtAei0DUm-kOvWm5rF3KUxqvUJEDEJSNTGaCv9bfpv9vflN11XYHCCvBHl4ImDWOKBTSBS_r3Iviat_pM3zBawrSTMUnmP-o/s1600/habanero.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"habanero.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 88339\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88339,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 147","md5":"59e1080174303cfdfb2b5ce6c4a19844","sha1":"699ddaed278a6feefb9eab9105c6f54003bd511a","sha256":"e081b023781a85d9734212e89869309dcfd9e5e35c21f78f0f617f292b279025","sha512":"d9a0350b494b549decf4d718c53ce7ea257a1151d8e3cdc0a5fcac3bc6113494b438bce7ab0f6bf4459feed63623b6f289d11435afa0026d6d32e8d1a5dadd73","ssdeep":"1536:On8ZYglVB+EacPvXYMn5R5arA6IFkmBuvOhHj3ei5cfhncXV:oyrlLEEnTarA/FFBzhHjOhncl","tlshash":"7e83128c856cc01ec64676f632bb6a3fcade82d80941d620bded2ddd105947d770d85e","first_seen":"2025-03-10T18:34:18.299009Z","last_seen":"2026-01-06T14:19:09.717825Z","times_seen":3,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":513,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE_uaiq6RouxhP4zZ7yWDQQZjTcumZImQZ8XUCapUG-qB5_nWaO6BWLMtjpJJqK4Y7DRUZiEbu7DHcjoPIB0qAL5QGVycOgMLA3uGXXSmMQ9Un23YQAaQJLVHJb0jq_LA9UjhOozFdMRjmPkPvzOeTU-tTUJeHUDvpyEPWvjuWVzQembtkRrjL1yf4f9E/s1600/CALIFORNIA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjE_uaiq6RouxhP4zZ7yWDQQZjTcumZImQZ8XUCapUG-qB5_nWaO6BWLMtjpJJqK4Y7DRUZiEbu7DHcjoPIB0qAL5QGVycOgMLA3uGXXSmMQ9Un23YQAaQJLVHJb0jq_LA9UjhOozFdMRjmPkPvzOeTU-tTUJeHUDvpyEPWvjuWVzQembtkRrjL1yf4f9E/s1600/CALIFORNIA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vca\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"CALIFORNIA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 74844\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"23d8fd462db5328451772057ac7bc8ad","sha1":"306e58b39aef51e0801c61ee3e35a94d399ed371","sha256":"767dc54e788f0afa51481e3afccf914fbf9761f3795d6c9d40dc268b2e3fec28","sha512":"e0ec4ec19116facaa600b3e29dea6959cb5b7e0f31cb6fb68843e7c77f960cb6829b8a90b6e677ea7d4344beaf98b843dbd59da0be8b74f84d03a329fec3756b","ssdeep":"1536:AwJx9gZ/C6/1rLmQt5onjKw5/c5Zriqpb34q8G4snLMm2:V9gZC5i5iuwdc3riqpbIq7xnLMm2","tlshash":"bf73022bd6ab0426d7949882dee7d683983efcfb0b408d1557c7f4a9260d81042ec776","first_seen":"2025-03-10T18:34:18.202674Z","last_seen":"2025-11-10T08:02:24.766497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":625,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5OzyFCpe8_MWr8WRMbmQN5p8UVfdlV93OUhVEDeizCLQJCURUylnlsWLHPxd4XgeZyhnPDN_aeuDGA15Mf-hRczOM0CIyBF5ieuz-8WXrUZwDWgweS67ukoj7VRpumH3GMac2_QJXXSpM3fJ4ZBK7dNBJOsOJdnhTp2cVSAp072Q2UEIxggn2liO63Gw/s1600/CAMBODIA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEh5OzyFCpe8_MWr8WRMbmQN5p8UVfdlV93OUhVEDeizCLQJCURUylnlsWLHPxd4XgeZyhnPDN_aeuDGA15Mf-hRczOM0CIyBF5ieuz-8WXrUZwDWgweS67ukoj7VRpumH3GMac2_QJXXSpM3fJ4ZBK7dNBJOsOJdnhTp2cVSAp072Q2UEIxggn2liO63Gw/s1600/CAMBODIA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"CAMBODIA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 69471\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"1cd46c6c2798f3083232ac1f10e242a7","sha1":"39bea641969a4776024b29e7036d76d4e99d9b5e","sha256":"2b98c34c412a6ade2b9b6e5c3c4feb777029933634cc1e1281edb2395e2a712f","sha512":"9077bf48fc283259b352a24e6a27227539d7f97d39cb61a684a07d989900b8d1d653da876be4c3b6b76db6117d1b26bba37a9875fb586d26a0e903a845b245e0","ssdeep":"1536:rKNdEQVn9/503f4I8SvSYhgUF1k88MyaSXIs3Ayb+JViX:rKNaS9/GP4I7S2gAktjPcMX","tlshash":"7c6302e75c28f910cc7df01506653783d5cce2d8c86c98ead816eee990a6978fee05c6","first_seen":"2025-03-10T18:34:18.245414Z","last_seen":"2025-11-10T08:02:24.767421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":672,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/promotion/IDNTOTOSYD.jpg","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 02:33:07 GMT","end":"Tue, 06 Jan 2026 03:30:34 GMT"},"fingerprint":{"sha1":"FB:29:2E:91:22:56:62:7D:66:73:65:58:21:2F:D1:A5:A2:D2:53:7D","sha256":"02:B4:72:2F:DB:F5:39:85:FB:54:56:80:59:B6:75:C0:6A:9A:27:20:5C:B3:29:23:1D:DE:8D:0D:0E:44:54:69"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTOSYD.jpg HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTOSYD.jpg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCXPxnK1iculTy1CLABRWLER4W7qWb%2BmVdX%2FMCB0kpT0ZdFnVUgvboYmISjAsr%2BowH91HFdl6SfljT2W0FzXE3CLdmUqlYli4akPhCW4ew%3D%3D\"}]}\r\nage: 1040\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 99c405873d5956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90323,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/uob.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/uob.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 52191\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-cbdf\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYqVMRQCtiLv8C8v7gqp98hy0Excn9En4C5d8LZLgHw9wVsXdyI0aYwbqUue%2Bsmi9HpAUrgfPeVR69ihv6r6FB%2BW3kAhyBqBNJ%2FS%2FHh8GZNwUstIInUotz0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405873feb56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 723, 8-bit/color RGBA, non-interlaced","md5":"2c682ae361b71fc92f8611a44ae08611","sha1":"0eb57449e393b409ae694b6a762fbbc3d25015d4","sha256":"b227b05b6acfc3a3739e43a934ac5a91c7d4710a55700af44aa4b8516b4af216","sha512":"97d31deebffefb53977c0c927a764da47c8e6c148747421b8d81566f0004c75ef130ab0a884d652c87e1ebb7c3c14560654b4748bcb00276fae232d0642df84b","ssdeep":"1536:+74jVPX4cy2ksoOgplGhxR2j5rra4DSGnx9z:ksusoOgkb2jJrtDSC9z","tlshash":"4933e1c2cea29830cc98533187e7df60b3765ebb48bb03a615b4f2157d573d5284a72a","first_seen":"2025-03-10T01:18:36.704054Z","last_seen":"2026-05-31T14:29:26.899864Z","times_seen":117,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/parallax/jquery.parallax-1.1.3.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/parallax/jquery.parallax-1.1.3.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-3ad\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8XfMUhEFlERMYJ6HjUvgTNxwhydxHLze2idKvjHFOu%2FHbYSvKqDhWfj59gwYC86%2Bps%2FCdaCcoTkAvGrw8s%2BrVSl0NcWZx5WkhYbb%2FeK9FtfSALC83DSVWUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587883c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (420)","md5":"1508097fb2657eab7e68bd385cfbdbb1","sha1":"c65b4cb7750055e01101a4edb2f7d2d749e85174","sha256":"ba75543913b3258b7a19cdea608c7cc47322898d244b40b6190c970be2d3a2fd","sha512":"fb2b63f3aa3e83603dd8ac3211bd4624c00a0f534935dda13ad959121608d3bd7e3d5fa284c470692a9c57129ee665cc4a39bc4697d09c45841f506d9f5a7db1","ssdeep":"","tlshash":"0f115b38bb107255c96a762f0b3be309b21736415c028124d229e5dc6ea9a5bf86ac68","first_seen":"2023-03-08T09:00:45Z","last_seen":"2026-06-03T16:38:17.987808Z","times_seen":2122,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTTOHK.jpg","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 09:23:49 GMT","end":"Sun, 28 Dec 2025 10:23:34 GMT"},"fingerprint":{"sha1":"D9:11:40:2B:52:12:A3:63:C4:71:F8:21:80:E7:C9:8C:7D:40:68:DC","sha256":"B5:2E:CE:BE:D8:8E:7E:C5:64:46:1D:95:A3:FB:68:C4:E6:57:84:59:03:28:E0:31:8B:65:F9:01:BC:D9:93:6E"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTTOHK.jpg HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88744\r\ncf-ray: 99c40588e8e4568e-OSL\r\nlast-modified: Wed, 16 Oct 2024 08:12:30 GMT\r\netag: \"670f756e-15aa8\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nexpires: Mon, 10 Nov 2025 12:01:23 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88744,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 840x480, components 3","md5":"a68cbd4cadc54ae7c2bdcb8bcf4c13b7","sha1":"4e8ca505e4b8ee0f154d9446d44e98769fffccdf","sha256":"cf91122176ba6cadc04f42930dd19b4f8db1b670efcb5b9d8cdc18696e3d1a65","sha512":"58a3e5cfb5a3d9faa2cbf7508765c96f1cc37266f0dc839b84fca1d8c77cb717eb277eddafa93decd163ebd06c2facf7e9cbd0612818a17038c3b22bea548f41","ssdeep":"1536:QPc1JYCEuB4veZYnmyKx9wwwwwwwwwwwwwdTa39wIQBqoQYCrPcXHYoXYwQ/NAFZ:/2CbUnmyvGwIJ3DRcYwENAP","tlshash":"fc831209cda5adf3c987f67993301364e3b1bc4dce4635de44fcc29922a60506d6abd8","first_seen":"2024-10-22T04:17:53.670323Z","last_seen":"2026-06-03T14:21:47.95486Z","times_seen":1508,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":40,"dns":20,"connect":3,"send":0,"wait":65,"receive":3,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQaFiYGddtbA6nZGM6XddzhXizZZA-ur3lVk5z7YE2_r9uF8KeeJDV5FG5HyUKrFV-F50HFI8jR1b1iJRKOG7nKH1YYJGLAyrhbKruMTFny-wqjY2Qke9tnLJbxLoSxGt0Z6ADLb0218MeF0zqdEivrTTlcjWTq0EE8Q1nwVbhJbOZhLY4y2OLNNwHKVg/s1600/mono.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjQaFiYGddtbA6nZGM6XddzhXizZZA-ur3lVk5z7YE2_r9uF8KeeJDV5FG5HyUKrFV-F50HFI8jR1b1iJRKOG7nKH1YYJGLAyrhbKruMTFny-wqjY2Qke9tnLJbxLoSxGt0Z6ADLb0218MeF0zqdEivrTTlcjWTq0EE8Q1nwVbhJbOZhLY4y2OLNNwHKVg/s1600/mono.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"mono.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 1282820\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1282820,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 269 x 132","md5":"e3478747a0d7a316aee212be3c437266","sha1":"4b610b68e9f38f8e63084a42200880d833b157ce","sha256":"4f43e025d811b214628598bcb62615d863072177b1ed361649e8391d3f6fe107","sha512":"88d949598963255f37ce351257abca054f28ccd03f81a98aa3af53bc8d97ea532b6b089abacd2810129e22b3bbb0eaab5e4629a72740de967b46cd0b865cb292","ssdeep":"24576:5enadicAc1VLnJL3I2iqfQ4fTtw0jB7trWqusDw8c:5eK3VLJL3M4vXu5L","tlshash":"60253319212055f628a73cc9aa5d1f04bf2c33725e08af3679ced96ab8e415c1136fe7","first_seen":"2025-11-10T08:02:24.773907Z","last_seen":"2026-01-06T14:19:09.710929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":417,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2STWvmgVvem8B02MMROfTh-fDEGe6xqazEZJm3vOp4TfIfvQLBjEedsVCYCvdSLT8UVT0SOODpfX0Vetmr_jIaEoKrbdglHzUqtfc-Ns-Y8-cEfUtc7338pVaUKKXYBfOWCvKvPMAieTim6uANjg7-koZ58CxQDlJ2bgtt6XAeDF-cOV8DH5KiF8j7Eo/s1600/SKOTLANDIA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEi2STWvmgVvem8B02MMROfTh-fDEGe6xqazEZJm3vOp4TfIfvQLBjEedsVCYCvdSLT8UVT0SOODpfX0Vetmr_jIaEoKrbdglHzUqtfc-Ns-Y8-cEfUtc7338pVaUKKXYBfOWCvKvPMAieTim6uANjg7-koZ58CxQDlJ2bgtt6XAeDF-cOV8DH5KiF8j7Eo/s1600/SKOTLANDIA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vce\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"SKOTLANDIA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 58810\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"89808bfa00f4549dfe1a4a254139af50","sha1":"43c0ea1c424adae3285a003d12bd09b46f7e1e5f","sha256":"76241c9b78966aa6253ab3367c5801310bb389e2c11a2c07e1c70eb66dee4adf","sha512":"3819e83f632839a69d925cefc4ab3c241681334d4b28e1c02ca06def61a331ac260dfc8dcfa4918a4ba1f57bae11701a1c91d1fc602ace716aaf1739eeb3633b","ssdeep":"768:sSVN8C0jOW2Tp0qvjsfDoJocLEjlBD26Zd2VazZ7JJYkRMDPJKwh51s8c4csO5pw:xeVzEQYQlBCc2YzZUkReK1QcFRV0a2","tlshash":"89430208c99cff219ddac081e909e94ebc5278bd914fd9c267676bcc42c7587b18670b","first_seen":"2025-03-10T18:34:18.252029Z","last_seen":"2025-11-10T08:02:24.777759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":320,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/azl/favicon.png","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/azl/favicon.png HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000; cf_clearance=1q79WqUg1XNdl1EzIlNYzPrWBI1ArTFkvOq6vGjPmi4-1762761684-1.2.1.1-Tor2hznVbPk3wXjmM0C2f9K32lirIPMBd5avRDjjeqinenanr9U_ZWwfNbsEB9ffcUtkxD5pTOSwwPsrHcVxES_207fOHna0HrCr18zrlNQIEAVdb4qdG8QM82f1IFhPqzsQ3._Sfve5m7u..Iw.ESs00yBzpJGePAe6vxnN.Z4LCrEBCrcVMV.PHJPJZc8XrSZhaMis9TColTKZiPoC8cPmZLDpkEiHsY9kIJVbjaI; laravel_session=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%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 3555\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:09 GMT\r\netag: \"6749249d-de3\"\r\nexpires: Wed, 10 Dec 2025 08:01:18 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 7\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsO0ye05Qk9Bctu76UoKXefGHxOL86daPxCovIeQ14PU3qZr7NyhYly6D5ZQS9e2CsKQ0EOBkTUC4N6ZhXHUAX99BkOfqSaATIC%2BX1RbtlXyVP6%2Bkvkzejs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405964de756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3555,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"bdbd30b3d42c178e0cc4d4368edc51d3","sha1":"add64bbb2c004b8738bb6bf3922dfc6cfc1460ec","sha256":"7a447a9250a971cf39d27d4cda7b89b552d4fc2266468479300849f1c741d17a","sha512":"5fec0b1c56af447af70e4aef9c0db9950a3c83567ac2d4bce65b6289f34fa06a0e5db72b98d8f892b808d380c61945393427a0511afb4b2cee7e83e70c2c830c","ssdeep":"","tlshash":"fe71a749fe11ac30878db641a6e9a2572e771bc4dac2a005fcde8c0718a11f9ec5e7d5","first_seen":"2023-11-05T12:09:26Z","last_seen":"2025-11-10T08:02:24.779231Z","times_seen":3,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/jquery.fixedheadertable.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/jquery.fixedheadertable.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-298b\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jAl8CJd0G9nyWB%2BM6cD5hte54TJLaC015iTBhsI9X0fumsRMDE6YhjRSjlTLlzbvKtxBaT5fMYGbW4wK6S3fFCWskfZpdDJ4hDjx2YjLIHH%2BMY%2FASM%2FqYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587884356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10635,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10207)","md5":"406edd97a8850446d2693ef306af0708","sha1":"bd4996afdab1f18893ef89c3281c55e6585f334e","sha256":"991994866beb5e90d2205f4c5d4a757ddd38c6399386335991b260a89d857fa1","sha512":"493f04e96c9ead6dd640cc2a8c53e4aa3b43171c7dd51a4eabfce9fbcf00c51fd9d2edb1be40e6dac6ab6f3850b53234f177bd232404ce70ff287c11735f7d8c","ssdeep":"192:J/PBMlQxEuOaOGWzw32xilOXrPN7pOIN+5Mfj9SPHwjwTuv0vS2QeON:JBMlQxEuOaOGWzGEZrPNdh05NPw+S2sN","tlshash":"9b227195b3f93192c5fb61ba59fe014db0214d37a74b44b0b1aec1b81e70d8d22b9e2d","first_seen":"2023-03-07T23:34:28Z","last_seen":"2026-06-03T16:38:17.927372Z","times_seen":2090,"resource_available":true,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwbDmCfiV4254pyOXc2YmM95r5Jsbc0fbngQq_5EcxuJJ96f4Ou-yfi79W4F2G77XrMQY7OfCp5HAYWKMaQixAtrVZT-ADogfFKfw-iYeKSDniVMOO4d81ddeHYhs2VJXcbxR1ecxiA8kXVPJmchEePkgfMt4gHPYIirBofNZDpJFRQVgTGkN3-k_e0PE/s320/title-slot.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgwbDmCfiV4254pyOXc2YmM95r5Jsbc0fbngQq_5EcxuJJ96f4Ou-yfi79W4F2G77XrMQY7OfCp5HAYWKMaQixAtrVZT-ADogfFKfw-iYeKSDniVMOO4d81ddeHYhs2VJXcbxR1ecxiA8kXVPJmchEePkgfMt4gHPYIirBofNZDpJFRQVgTGkN3-k_e0PE/s320/title-slot.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"title-slot.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 22180\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22180,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 72","md5":"beb18077a6e0f10fde1362af807663b2","sha1":"60982023b90ed49a5f65272eef82a652170600a5","sha256":"b59350991f12b74e763278ee7ebea4e1a6f6a3baa98adb590b28c737f5c9919c","sha512":"6034d514184d039b749ee50f214b9ab2c1991f8b9efff08e0465f75c63f96ef8ae29f4f4fd18ec547441a2f2ecdeffa2551f7bae97acc3de9eb99317848280e8","ssdeep":"384:FqrFJkEXKP+EIUfOTkmITe5tm0KbIFrtvPvndW47Wfur2A3hDHuyJHHy:F6Vm+EwIm4mh2IVtvHdW47Kc8","tlshash":"f9a2d0d5b83240a6f25c837a14aa2d8e9c7858f9161c2a97dc08bd51d73bb6db2c12cd","first_seen":"2025-03-10T18:34:18.205738Z","last_seen":"2025-11-10T08:02:24.781465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":506,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfCBPfyUlaOPOuU4Ko_GQ5608kOfAyCgvsFP7sOdmLGN_OzJJG3odAYe9eIVXU8P4Za6cZn1RQDRGG6TGlkc5E-4jNyE0c6p5gRnPE5tN28J6SqIr41JzceeMU6Nq2j1gwr6wT0xRrLICwY8sdXf_kHj3hFTWgk2u36EIv9W0EwCbQjEVzMjeFqIZxHuE/s16000/bigo-user.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgfCBPfyUlaOPOuU4Ko_GQ5608kOfAyCgvsFP7sOdmLGN_OzJJG3odAYe9eIVXU8P4Za6cZn1RQDRGG6TGlkc5E-4jNyE0c6p5gRnPE5tN28J6SqIr41JzceeMU6Nq2j1gwr6wT0xRrLICwY8sdXf_kHj3hFTWgk2u36EIv9W0EwCbQjEVzMjeFqIZxHuE/s16000/bigo-user.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v11b\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"bigo-user.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 15019\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15019,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 242 x 242, 8-bit/color RGBA, non-interlaced","md5":"e11bf84d600e520921f693cf19effe41","sha1":"1c6afc516abe43ffbba6407cbe9cc1578681f472","sha256":"863bf21281864cb702fa362d59f9df289e43cf8e7953ec8925069a7f914df1b0","sha512":"dabcf9afaafb876e281067b62ae3c4996ed890352c019d66bfab02fd5c95cd07abda8f8830a65a249f72b6a8710816f87fd1fdb5a139251251089e78c45c71d3","ssdeep":"384:V9gxY+ZeCeiN9fLZjERhy9s0CXTWWFUylz:V9gxYsPfJDHCDnUsz","tlshash":"7e62cf2815f1edb1101b78604d3b88cb8cc571157084c12bbc92e37ee43ce97998aa9c","first_seen":"2025-03-10T18:34:18.322506Z","last_seen":"2026-03-01T02:55:43.974009Z","times_seen":12,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":635,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJVCjgFuvHFV1koBIKG9AJPxULU4ce3IxtAxNio2gawY1OoVUgWusfWq4V-_2JxYE04tNzX99vnqUGu-sDEsVxD_3fCacjqB4NVGma2s7-lIS3WRbfFjxS4atN_FDI5a6pEmtYk8ItlOs9x0jiJllQHp5slV0QR5MTd5VbA6fvnTxBrXt18Vgr4Dn-xNg/s1600/bca-online.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiJVCjgFuvHFV1koBIKG9AJPxULU4ce3IxtAxNio2gawY1OoVUgWusfWq4V-_2JxYE04tNzX99vnqUGu-sDEsVxD_3fCacjqB4NVGma2s7-lIS3WRbfFjxS4atN_FDI5a6pEmtYk8ItlOs9x0jiJllQHp5slV0QR5MTd5VbA6fvnTxBrXt18Vgr4Dn-xNg/s1600/bca-online.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v141\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"bca-online.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 8304\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8304,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 145 x 87","md5":"61f8571a96f08268d229e3e2a28dc21d","sha1":"908ed349f4cac5ec95ae93cffe8fde804fa1285f","sha256":"cd90caf1afeaaf194c2411b50d88e6ee2287aa3ff6e8e87c075c0c4f55f50f3f","sha512":"4f5267c97763ef81435961bd57b1dfad9726d6425fb11a2d50b10d96b89cf7da8cab03b1abf1c7f89cf5247d3528aa6a9ff50608891ad6f9b1b927700dc4d61a","ssdeep":"192:j87Fo7FP31IJ9fxPTojLlF99GGwwcXHhZAtV:YA312fxUdxwhXHhW","tlshash":"1202af1dd617f42082edf97c18b92eef161c33b46fd29d14800d698a769ee5c6713d90","first_seen":"2024-08-19T20:59:40.104063Z","last_seen":"2025-11-10T08:02:24.783121Z","times_seen":4,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/linkaja.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/linkaja.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2146\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-862\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ye5Oqr%2BR79XKoC6mnBIjhaLBjLGw7bqmWCmFoasu4E9tGWcDd2%2BJgV1KQDspj6s3ndqbpNhSnXAq2Di%2BnYuAfRmf5nv8SB%2B%2FyYlz22ZZWaZ7qdWJJQL4Ykc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405872fd756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 25, 8-bit/color RGBA, non-interlaced","md5":"2d5925ab422101ea8f19560ed06cc097","sha1":"f749f359d92005a41ffce77b9a2d8c5888670f6c","sha256":"7dfc635cc62e740491850e4bf48ecf3cf0cf21b248f9af8536abac4157156888","sha512":"8f9205a7ba24d863d4f65eae2bfd8159e19a06604c7af5df15dd5548a553aa9a7410bee56ca52f3ad927a6eae846d3ad12864dbe01364004b0a5ced52e518608","ssdeep":"","tlshash":"1c411a9fe804764264a9964220de6423ec4380816294f075acdfd82f57bc4fd1d0b6cf","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.160148Z","times_seen":1780,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhET2EskqlIASxTIXnkh6tuiyr1z-pioZ-lRuDJJwPa1r0kwhSImEEoKaw8FsA1sneJhQ7MLDjBZHDRA2oHa2QuvE_vGwaJ9oPbGDiMSrbo00aO8JeIwqJtKyC7hbfNTY3EW64zXRwC4f-RemUyM9D5aNZ5I68pFZGR3b_rwYiX0A00zaZT6R5as5b6Q8M/s1600/toto-macau5d-1.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhET2EskqlIASxTIXnkh6tuiyr1z-pioZ-lRuDJJwPa1r0kwhSImEEoKaw8FsA1sneJhQ7MLDjBZHDRA2oHa2QuvE_vGwaJ9oPbGDiMSrbo00aO8JeIwqJtKyC7hbfNTY3EW64zXRwC4f-RemUyM9D5aNZ5I68pFZGR3b_rwYiX0A00zaZT6R5as5b6Q8M/s1600/toto-macau5d-1.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"toto-macau5d-1.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 95997\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"0fefb73bd7fb06767121c21e62cdd42a","sha1":"3a606d5bdda7bb7e620cb7379530eb7ab3b9bad6","sha256":"06c1eda2980624112e270832c7390d12f04c770cc886f0d0c5e5031a2805fd9f","sha512":"b5b89e69dbae77b2d29c00b703fa2a2f50a64e6711409857f54807363ab26c18c4f11b1c1372f8b404e04b2a5813fd62581ecbf30888b551f4c759ed1dedcb71","ssdeep":"1536:GLuzIoeKz90c2wXLmUZjzjHBsi4slrptvxycyrYEzKlm9fOhceng3JoS:GLbKz2ToiUZjzjHBsi4Kr5arYEzem9fF","tlshash":"66931243db54fcc87ad31e0a6caf758ab6d001411f3d56a4ebfc10ced068385a6aaf55","first_seen":"2025-03-10T18:34:18.338579Z","last_seen":"2025-11-10T08:02:24.784897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":616,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS37iUCYQWPXkVgyNvkRQaIVQ_ANLrnkEeAEO8Hrfc-6XbVwysTZMoaPipFgk3IUHOv2oU5UZ_PoJwzcFps_RMHp9SY2mFH2bm0iX3vstSVBucUWtO1ekTJ2P9f08BIocgbXKnwE6rPdCw9FNLZ9t54VEfXrDnCuSqbBJ6uVqBp0czQzxsCUP88xNf8PQ/s16000/engine-terbaik.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhS37iUCYQWPXkVgyNvkRQaIVQ_ANLrnkEeAEO8Hrfc-6XbVwysTZMoaPipFgk3IUHOv2oU5UZ_PoJwzcFps_RMHp9SY2mFH2bm0iX3vstSVBucUWtO1ekTJ2P9f08BIocgbXKnwE6rPdCw9FNLZ9t54VEfXrDnCuSqbBJ6uVqBp0czQzxsCUP88xNf8PQ/s16000/engine-terbaik.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v2c1\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"engine-terbaik.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 63852\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63852,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1106 x 76, 8-bit/color RGBA, non-interlaced","md5":"837ae843debbe8247bdfeab81260d043","sha1":"af1d7f8e31878da703cc0941e076e552bcc8006b","sha256":"8e2f8afdd6daa2d32ca552c7668913ff2d296a057549bd0f827a1c1c6178bf87","sha512":"d6ee73ba74880fca71f86a61503440ec4ddf345f9a8d99729f291f43a3774c064cab03d14b4ef8747d1d1aaf86f25bdda871c4972eaba136d97c15ab605d8a00","ssdeep":"1536:KtUnzzda/ECPpz71AwL2NkBq7uttEJfw995QzaM2etcDQ+lZS:0+FanRX1P2N+iuXqfi95QzB2XU+e","tlshash":"4e53f2c4f4a231ee6bc3e3c734fb1e0599a195700a3891e657c91809f24cef95aa4da7","first_seen":"2025-03-10T18:34:18.220646Z","last_seen":"2026-03-01T02:55:43.957675Z","times_seen":9,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":678,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/a/AVvXsEjz28eCdSpdn3hcTu1wVFUE-h2fzM9PQut5hDSNQFv-MSPHirv1vtuYOOxCNJS8QBtV_w7RFki5cbbZsKpdxAnjPGStHnqhfyuVYU64iMogwYv5_UzgWV3jTHj3GvoT2HCd39w4LowCyEHz5qDI6yS3posp124gbNZnGgAffTZJC-V3pJWp2DrVu4dKXnc=s16000","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/a/AVvXsEjz28eCdSpdn3hcTu1wVFUE-h2fzM9PQut5hDSNQFv-MSPHirv1vtuYOOxCNJS8QBtV_w7RFki5cbbZsKpdxAnjPGStHnqhfyuVYU64iMogwYv5_UzgWV3jTHj3GvoT2HCd39w4LowCyEHz5qDI6yS3posp124gbNZnGgAffTZJC-V3pJWp2DrVu4dKXnc=s16000 HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v433\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"back-3.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 406306\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":406306,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1919x1079, components 3","md5":"0fb8bdedd5c3f43f18976d22f1640e9f","sha1":"8d38f97d70e004a2b2662d1405b933b4502e79c2","sha256":"376306e48d3617214851a172958a83cf98d56274aa0c850d427d8839f70b2e0f","sha512":"339d67cb0e4c0cf9793bb12cd9b4d9943d73518ed048588c2fb2c99bb79f40c63e398a720d0118a8afba85113e9b0be937d54f0135d3931ac5e2a89b97ffb49b","ssdeep":"6144:INP+1UCBpfkyjyGRI4ob9nXUoeUVuM9WuXE1PxblUjXcu4tTG:IN26CBpfky99ob9V45xblYXcu4tTG","tlshash":"98840216875acfde34dc172679e3436bb043d63394138a94e647a8ba20d323d86e747e","first_seen":"2025-11-10T08:02:24.786597Z","last_seen":"2025-11-10T08:02:24.786597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":106,"dns":2,"connect":20,"send":0,"wait":297,"receive":36,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-totomacau.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-totomacau.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52505\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:15 GMT\r\netag: \"674924a3-cd19\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 78\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wr%2BqJQAaRkcQwL2XLjL5rlbHJ7XGvYhmM4CTSGNvU%2FhcJ9GKbZDNUMDfgMxoFoNDdmNj%2F318AcGOfsC7SMuqRalXCdQxwIrn4XyfmScSld9wV3WrwDc8Ar8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c40586ef8256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52505,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"1aa941152037ed686d532ae5691731d7","sha1":"8222036a29fa540a55dbfc2cfff401b12d5cfcf4","sha256":"44afa7bac070be11a25113dd4ced630691439d7801bb9fbaf0b2251776d1e558","sha512":"c310d4567377aeac86f5427ce17f1a625b23552869737634a66946362619f616cb69b0b74ecc96080bae282684f553227fde12019a927cc9d1d5098c0ab62c95","ssdeep":"1536:qMgV6MUNNyDP4yWj4GYkUnk5hNQRh3txlI:qY/6DgZXUCNQLtY","tlshash":"5333024dde52a720c3e946ff7538938c06464b64066b3d90fe080982ee32fa65f63769","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.123598Z","times_seen":1805,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/bri.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/bri.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1040\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-410\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BA8IkJqfcldtIRQ99MA7l4yb9PMmrxA0PxvA9p%2Fuiglcmof7KmWKdA7EqyesuzMSE4YGRbD8YU25HDMG2pglzjlREqYXG0%2FYOePZb%2BRRfZaUBG9Ktp3EMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405872fcf56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 21, 8-bit colormap, non-interlaced","md5":"6dc0d7a52a5bbb2bbf4fa766d445632a","sha1":"5f3bf4eeb2065a5ada283143a629b5b6126350e5","sha256":"5cac9c4ea7470f69937f3e0c66643af243f022ba1d0d1b92ea0b891be8d3e708","sha512":"98cad2ab03707adc5edf39f059b76189db33e6fc89bb8f1877e837cdf7f4adaca09854cd7439bfafafc9be6c5f34f47b9a218b88718acbcd34b925c037c2d715","ssdeep":"","tlshash":"2811d8ca3912bc8cf07c485000a0621efb5c01e009137c26eeab5d5c54831054ad0e1d","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.148462Z","times_seen":1835,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqdBoxaXy2_TRncXCNb4rV_7dfuyp5CTnARzyLSvGyJZFMnpojcYF-gud6LfW22ZIzYDXDFmXFc0C5SffizOCtMMR1mvIRE-Ic8lPO41zAM8J6rY7ArQDk7WuNxbNaLzJaY29UDW1_u-nVhnxmPTqwKdrsxzaZgJLVGQRnCsh4nk_oKzr8KonJM2iR1Z0/s1600/idnslot.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiqdBoxaXy2_TRncXCNb4rV_7dfuyp5CTnARzyLSvGyJZFMnpojcYF-gud6LfW22ZIzYDXDFmXFc0C5SffizOCtMMR1mvIRE-Ic8lPO41zAM8J6rY7ArQDk7WuNxbNaLzJaY29UDW1_u-nVhnxmPTqwKdrsxzaZgJLVGQRnCsh4nk_oKzr8KonJM2iR1Z0/s1600/idnslot.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"idnslot.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 105048\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":105048,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 147","md5":"e0ec248cf53f136cfc7b6fa76a46b07c","sha1":"a727dadf7f6c8e14c72a6f9157b6dffdb35344ec","sha256":"c4968a753f7bb4bddcdb36c3090495c95d8cd70332127e1513d92aacc9225e52","sha512":"85b5c19e7afbc86f332a784089ada3c9ee731820bfee7f429a97f477561596153b1bb9531d30a9d59d52faa4ffac344a3ce79ca2be1d1510f301ae67d9322448","ssdeep":"3072:r7+WjSAum1UWWERCe6J+6Jo2oeRlPGr4X9T:W3Aum13W9FdJo29r+r4NT","tlshash":"35a312159dacc4dcb8361b64ca512933d4822d768ad8447e847ff8afcaa7138161ce77","first_seen":"2025-03-10T18:34:18.209929Z","last_seen":"2026-01-06T14:19:09.776177Z","times_seen":3,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":420,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6ulxkJJ6KKnEjPXgb-GSNTfn31M1dxBX-LJRqgoL0KujOHneVsmHmrQjJcbIxZv6JAwdkVFbQSsXpgP9U-98nhTdD2IVA18qHKF75ofiNk6YxfQQbTPhuO7deOLQLgoToIGDdHhMZFSmMtavhHTPx9RMUqNFfE-uLeSNE7ICdIH-GepFOhRUVhRtc9Hiv/s16000/logo-rudal-gif.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEi6ulxkJJ6KKnEjPXgb-GSNTfn31M1dxBX-LJRqgoL0KujOHneVsmHmrQjJcbIxZv6JAwdkVFbQSsXpgP9U-98nhTdD2IVA18qHKF75ofiNk6YxfQQbTPhuO7deOLQLgoToIGDdHhMZFSmMtavhHTPx9RMUqNFfE-uLeSNE7ICdIH-GepFOhRUVhRtc9Hiv/s16000/logo-rudal-gif.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v67a\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"logo-rudal-gif.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 104187\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104187,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 350 x 93","md5":"d8d1a53a845dcbb26fc36762197134fe","sha1":"6f67adf3b29e29be31359b9b32743f31355e715c","sha256":"f1363ec831e936162e1e842ab3af6ec572937aac6c2ee9af8cff793f0e1c6d51","sha512":"b8411abc348243b4349f7e0598e8c8e06f465928b1b45cc2a5a048e5d58367bd1db8c5aee291dd65c40d6d59b1d92e4a5d37fdcd7e2f724cc8b97a3adb67a530","ssdeep":"1536:sO2/XXwlLbza+aqaTh8WXglT0wWOMOnfgLtLESvoll8w7183jmmYsu3OLTZB3e4/:sWbz+qkOZrd1ILbqBK3ssu3Ot5g8K3Z6","tlshash":"f6a3f17bc92414c7a81abc70254137ab5a1c4ce6a7fd5c623449f8872539f7f18d8763","first_seen":"2025-11-10T08:02:24.79151Z","last_seen":"2026-02-11T07:29:25.93481Z","times_seen":3,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":74,"dns":1,"connect":24,"send":0,"wait":595,"receive":47,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfeZykxa1RixVb5lceBuM3FjjFaU1oknMueuPOWgpu-bQjWAskgXYSc7U_0cskyUvCdPQh95mGy_gE3zmr0LDHonaA28QXGR5TK5FfwmQFbfmoRCjDqHbyiLhqyd3GK_KN1ojiJ_sZluVWFs7OUjbIHK454LAHOyIkhgyaKxGvrX4yR0hJSl5lVp5FPNE/s1600/FLORIDAMID.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgfeZykxa1RixVb5lceBuM3FjjFaU1oknMueuPOWgpu-bQjWAskgXYSc7U_0cskyUvCdPQh95mGy_gE3zmr0LDHonaA28QXGR5TK5FfwmQFbfmoRCjDqHbyiLhqyd3GK_KN1ojiJ_sZluVWFs7OUjbIHK454LAHOyIkhgyaKxGvrX4yR0hJSl5lVp5FPNE/s1600/FLORIDAMID.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcb\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"FLORIDAMID.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 68175\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8cdca3693c3c94f39ff9feda441aaced","sha1":"bd276bfb6b8e9fdc5b74ae22610ffad7cb8cc60d","sha256":"c504718ac7eb3858e0515328cba317653f0936854cb38a6ef8bd3cdad9a393af","sha512":"c662c344f2932f7faa8e3130cc911a7c5156d0c178ea6240bf025994b0480ebf7b2c4fbf1219d064ac45f05914400412139e11e36b280e774f2de5a8363b4b58","ssdeep":"1536:+qMH6f6skLukBr+fUSZWYhGmLYY8fGWzoSwc77uP6e1o:OH6CFLHreZwWLHorwcfmJi","tlshash":"e56302e488712e09606843c1741c928cd1f853e7c4d59b6b6bbeb3d59653abdb2803e8","first_seen":"2025-03-10T18:34:18.203549Z","last_seen":"2025-11-10T08:02:24.793648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":663,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTdOylVK3hOBaYcQu9_qb9CA2fuY76l1_V2-JV2jNBCWTWb_VPtSOe7F6Qe3FurFva9vsiyiIFmKWumo5qm_fMgEuPfVtRR8MU-nQQhTD4Qzs3LnY8DLSgoCpvYPCvreGkC-QASfvQGwTgcuvH7myW2uIGGG32qUCmGxyaeIZbuhP5te5enMkoXkQn53Y/s1600/kentucky-midday.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhTdOylVK3hOBaYcQu9_qb9CA2fuY76l1_V2-JV2jNBCWTWb_VPtSOe7F6Qe3FurFva9vsiyiIFmKWumo5qm_fMgEuPfVtRR8MU-nQQhTD4Qzs3LnY8DLSgoCpvYPCvreGkC-QASfvQGwTgcuvH7myW2uIGGG32qUCmGxyaeIZbuhP5te5enMkoXkQn53Y/s1600/kentucky-midday.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"kentucky-midday.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 77435\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"bdc0677504336c33326147d8818320f2","sha1":"125f9fd8071c85b383192436efb8ba42f8d601c4","sha256":"fd1ff354c866e9bd5b6c886d5d5046d1014c44aba5243ffbef7ca27bbf59e5ac","sha512":"aa7652dbfbf4586c147c35039b1ae56353e606a5256b586a04144fbf144516968ded7e47195fd675f19f2ca7e1a2e6cf767b7dbc6d323b423739557a801db896","ssdeep":"1536:oZ8E7KKrVTfGaqVP9xDrGySiCwqNAri8ZMn748tduTzGEhUklTVPj:oZR7NVTfGaq3NrGEloAriHcFP/Pj","tlshash":"1d7301876277d38879025484b02b814062d36eb679afb89dd09d9c7a7ddb060172efa2","first_seen":"2025-03-10T18:34:18.290488Z","last_seen":"2025-11-10T08:02:24.794505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":666,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/fonts.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/fonts.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb24-cc4\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSAy7RUPYLQgxSjs9f3rwXkMsoeNr0NohoQFWaWlOFd9nZH7GWemva1x3LbAqQy6i4KmCs71wpEUY3%2BowVG1jGvCZ%2FpJRc%2BmvTsZk%2Bwq53Ew1fFxvJoGXY0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853dd556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3268), with no line terminators","md5":"389b48589b4a792d84001fd40e21ba30","sha1":"76dfd7fb03f4d2cc79bd001bd4b2bf3b17983d39","sha256":"9531877a395471eb20e85f9e742bf48cde70d1e528d9aaa55c1c210fb3dbf811","sha512":"1684e29395c4a831710862fc5992a33763e2d2975584ea8a8be054dc2577ee115535db37e1a2febdb3487e8c65cab65e833ede4dc17cb19022f935f75511f75e","ssdeep":"","tlshash":"42612b26115bc6826a964dcb38cdb714fd2f19257878c5a6c51d6cec8cf366f0384f68","first_seen":"2023-10-29T03:44:37Z","last_seen":"2026-02-10T06:46:06.389294Z","times_seen":1104,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daftartoto.co/messege.js","fqdn":"daftartoto.co","domain":"daftartoto.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daftartoto.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 01:18:36 GMT","end":"Tue, 20 Jan 2026 02:15:13 GMT"},"fingerprint":{"sha1":"A9:7D:CD:60:91:DC:C5:17:65:B1:37:0D:31:82:FD:6D:51:3F:33:57","sha256":"7E:3F:B5:B3:6A:12:04:DD:7E:14:01:E4:0C:D1:EF:E2:51:38:D4:31:A9:F9:21:F2:24:04:6B:4E:E0:52:CF:F5"}}},"request":{"raw":"GET /messege.js HTTP/1.1\r\nHost: daftartoto.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5530\r\nlast-modified: Fri, 31 May 2024 10:09:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0oICV7q%2BIz%2FgUMZOr5oO11WJEFQzKo48405WVM%2BprNBFTy4RrTEF37JvEDh0IyvZYoyniBh8LENTiOicT8ujiN%2B9Fo5ufW8qK7C4pM%3D\"}]}\r\ncf-ray: 99c40585eb79723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19826,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19826), with no line terminators","md5":"ff3646acb703a4755521a96df6dc0ac5","sha1":"c108d8874d713c0fe3ded57a30d63a8cad360a17","sha256":"247bba5eb9a69da13de4b022026d61f77bf633a80269af84279cf2c369504653","sha512":"063c816d0410e7f14ad5d5c278f68f23a7892c6d302ab8d3c2a8ddeac8cedf0e61feb3b7c192302c4c8a341f17e5e8b0c24309c1812d7f14e9d1b74f5134a6e8","ssdeep":"192:LE6EXbGa1z2JorI+CdqZk1DRWpiItZxGBwRa2WKMaRK+dpF2zWGJ836+4LgTgouX:I6+Nx2sISk1VW4Z+RpjKuWi6PMsFdQVy","tlshash":"1092dde4ed4359d782c74aafe2b7f3c5f856ec3eb5c40c0a94016e1056a6129afe1732","first_seen":"2023-03-10T02:24:09Z","last_seen":"2026-05-10T09:15:34.303525Z","times_seen":148,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":52,"dns":26,"connect":4,"send":0,"wait":517,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/bukopin.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/bukopin.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 24072\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-5e08\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwJIxCHI5mGGMhhodiQYiCM4piZpUlrYN4Q9L3eq3YFyu8Tvohbx%2F6TcgZ7YKKcA3Pd4mg4ZV%2BT9xB%2BiGRPUpQ5RkLeavqnuBUqXhYZt3ctdoGOrHorNxf4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405873fed56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 816 x 568, 8-bit/color RGBA, non-interlaced","md5":"757c9abf361bec9eec46d677b6a748b6","sha1":"62c3aa9d9c006e8cfa2684c825783fc14d51c6a5","sha256":"bec001371a4a50da1dfc0ab2e7e663ade386d124920b251f9e3bfebce0638032","sha512":"8f7e9a977b23a1bda9ebdfeb919aab009a54d9748c052de94ee9c2379b0a7e45b4310daff85e7c2766e24e58e921c109f439919dc48901e3ca54fb5639a40f2a","ssdeep":"384:EuHSOMHD95TMEs1ULEi1Oap0HOEAie2PhLuktGtJqS1yC99ZXx5zFYWnD64/LAeE:lMLUUAvapIOEr5KGGnq4z99hx5ZfLURJ","tlshash":"5db2e1eb1536d105d0ea813cc1a10b2daeb296772c3183616ad75dd31d2b71d6ff09b4","first_seen":"2025-03-10T01:18:36.814085Z","last_seen":"2026-06-01T00:33:20.255658Z","times_seen":120,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":771,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/mestika.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/mestika.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 10294\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-2836\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlVuxog94%2Bg6g6yBaACypW2O8SEMAT9FP%2B99AwDxCUarOY8vFVir4eCWLLy3FJM0G5VCsxssBIhHcaqj9zRF87tXtGmrsgKI48Q2MPifPfoCj8yHq13M%2BrU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405874ff856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 290 x 58, 8-bit/color RGB, non-interlaced","md5":"d79504efc95aa4a2b0e275153a4463ab","sha1":"046aa52ab2efcfa589b1fd5a11c2473e68b24a1f","sha256":"ae2c4a2a050d1ebb8b16fe7ff0a6458f7e83fbe13f60b88c8d788053f69edb22","sha512":"9a2590f30e8309a6faaf7c6e4c62a0ccd45f56b80552c2a27ec3bc39028b9815ca9f90ae9f43dce6219a367b7d9475195f92fd18277b719845ac9aa707e7acc8","ssdeep":"192:dSmknXl5rdbU6XPXHhnGx7yVWRQ14BP4EQZ2yHFIEBj943RRDY8azCL:cNnXl5rtUuXHhnGx2VWue54EiXlIEBjO","tlshash":"d9229e69dd6b6ac1e78f3f8029c792c51537578126924c12e8ddcb93182e775805fdc3","first_seen":"2025-03-10T01:18:36.807988Z","last_seen":"2026-06-01T00:33:20.30038Z","times_seen":121,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/auth/login.js?v=fqdznpgxv2jki2wxbnbz","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /js/auth/login.js?v=fqdznpgxv2jki2wxbnbz HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 15 Apr 2025 05:39:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fdf11d-7fb7\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ms8YA9%2BRClxrBUCZtdSzPvtLerl51gwKPqVSLJTTMx%2BQnQ%2FX8ovRmwzBP%2BSadO7KJO5Q3xFf4Uo3oO%2BCLs%2BMNRcJ9%2FhOLb%2B3YpptjmlPoYmZDa0RGEUT4Ws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587985456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32695,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32695), with no line terminators","md5":"44707c412e847b9ae85fe0a7a0b1e81b","sha1":"14310992754c91b4e023f42ff1fefc94eed15568","sha256":"0f06109a3edc4b5015427cb22d029aa91a72acd32b71ce5079818fd6598241a6","sha512":"56f7269aac21348c0b6e9cef336b4450e65f257849b8d0c49598cb06438945c92d670af19fe073a3ee8869eb845827bb536d89e155ac3935d29b4e5a855bde33","ssdeep":"768:6MtYjbBIV+GgL4Wtdo1gJ+tvOx2RGwcgp:6sKbO+GgL4Wtdodtm6fd","tlshash":"92e2e88cf2c3f47907c3a16d401f9415f23ba454b5098898b75fcae2a9b598de123fb9","first_seen":"2025-04-15T10:15:48.996433Z","last_seen":"2026-02-27T00:39:20.459931Z","times_seen":1012,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/custom/floating_icons.min.js?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /js/custom/floating_icons.min.js?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 20 Mar 2025 03:10:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67db8738-494\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fF4UehdbA1IFqWqghEV706rh8pj78Xpzae%2FvoMLFGOn%2B6CvGkKULctHySs13VTxQ50Xhj0f1Iv2TwIlC6yKjF7HfeLMuuaVoSr%2F%2F3RC%2F%2BQYKhCwP0%2Byyu2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587985956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1172,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (1172), with no line terminators","md5":"a1f9706eeee7690ce0fb65264290a61d","sha1":"f47499adeca0a42d73894a8424a5dc65e1c8cde4","sha256":"afbf313c9cd8546932da922fcd36f00f9e0787370ac0d46ca82d3cb31d15d0ea","sha512":"99830735da3f51fcb6510a5f682638c2ded1a875790cdc5ed9eb928decf8d744a48e107d92af6db421b666a86cc88542c187c2d2a0c86535937143bbe898e15a","ssdeep":"","tlshash":"0f2186a083a6d43d83809166c37493097854302efe529640fdfc8a8b1ba9d4c6c23efa","first_seen":"2025-03-20T08:45:19.929797Z","last_seen":"2026-05-22T02:08:47.27492Z","times_seen":1766,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTOSYD.jpg","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.16.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 09:23:49 GMT","end":"Sun, 28 Dec 2025 10:23:34 GMT"},"fingerprint":{"sha1":"D9:11:40:2B:52:12:A3:63:C4:71:F8:21:80:E7:C9:8C:7D:40:68:DC","sha256":"B5:2E:CE:BE:D8:8E:7E:C5:64:46:1D:95:A3:FB:68:C4:E6:57:84:59:03:28:E0:31:8B:65:F9:01:BC:D9:93:6E"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTOSYD.jpg HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90323\r\ncf-ray: 99c40588e8e0568e-OSL\r\ncf-bgj: h2pri\r\netag: \"670f756d-160d3\"\r\nlast-modified: Wed, 16 Oct 2024 08:12:29 GMT\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\nexpires: Mon, 10 Nov 2025 12:01:23 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90323,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 840x480, components 3","md5":"8db56736ea051fcd404982815367ee0b","sha1":"b5056f17ec73b72f7f6675273ce1f28b6b4d2b46","sha256":"4e02417535468c9d74f33333ea8aa01ee1921f11cf19de61d1f9b1288ca9019c","sha512":"0b82f0c5ea273bfc4f4b5bf6064f17b4881bd8ab384b39b423d1f2a3ec9c5f29dea536aad9a24bddff9c3f89109d26c3ac07516a5c2066f626ee09abb5be2b0d","ssdeep":"1536:6QOQkYEy10jihMFSRHVh+eh58McnIJjB2FH/lq8gnkx38rQIW8BbeV/H:6QOQkYEy10mhMFSRHHb78382F9JxssII","tlshash":"e49302afd1b007c6d8b052b1ae3fdc4de001a51ce6a6a59ff6af45e954dd47c0a90388","first_seen":"2024-10-22T04:17:53.660679Z","last_seen":"2026-06-02T15:30:53.752876Z","times_seen":1506,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":40,"dns":22,"connect":1,"send":0,"wait":62,"receive":5,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLDa29B_OJcQpoO71UJ_NtyY3P-KCnCCX7ZCwcD8OKMOLBuJFT-pK_x0i9FjJktmObml-0YNt2zGIa8pP86Xxk7DwScvn0ifqLrxG3bjOgrEXOHB5TwMbrBCVLA5U2cXI7oI0KXuvWkudX-f7NAwkzr36ek6cRF4t-pDolQ0c8bGhc4PjJwJgjAUqBIGk/s1600/DOMINIKA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjLDa29B_OJcQpoO71UJ_NtyY3P-KCnCCX7ZCwcD8OKMOLBuJFT-pK_x0i9FjJktmObml-0YNt2zGIa8pP86Xxk7DwScvn0ifqLrxG3bjOgrEXOHB5TwMbrBCVLA5U2cXI7oI0KXuvWkudX-f7NAwkzr36ek6cRF4t-pDolQ0c8bGhc4PjJwJgjAUqBIGk/s1600/DOMINIKA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"DOMINIKA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 53435\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"812d4835f677b8a29a6d2acb5e014a88","sha1":"d4d18b8ef2473c876aa8dbc82fc7df47cf83e5c3","sha256":"377786db45b8556dd430bc489e4b2797920b698b3820e10fac55dcf96f4c675a","sha512":"0fed1f5ce2f20e0c3a245eccdea59126701bada5103c5355fdd8d5496a44b33159ff74926bc978942afd499caa26ee7dca8e2e7fe2a12f4acdf36713a3b68809","ssdeep":"1536:WNO2bkfal3YlIrYK4Hq+QVpyK9DxeovmhzOQKPVl1On:WNaapsbK+MpyK9DxrvmknPzYn","tlshash":"71330292592053ee5066c526f31d8ab064f7b38d2176aa47cfc17a38074fcb25a39bb1","first_seen":"2025-03-10T18:34:18.243854Z","last_seen":"2025-11-10T08:02:24.802909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":676,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-pools.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-pools.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6870\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:15 GMT\r\netag: \"674924a3-1ad6\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 78\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUsBqWGCj4v1fQS5zgpz0ky2PIq5i0xzk4vnBEvsvnhwKYEPhORfs9s1sjmYA4sqYPpOelRcy%2BNJPfhwMJ8AdSEuCvbxUCyNzZNQWIvj1W5bmfR7jm1Zhhg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c40586cf5156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"1b61fe941c5f21b6a5b2a0021304325e","sha1":"57e917596324667df9bb88ef7aaa181bfd53ae0a","sha256":"c1af05964be2562a6bbf7c1d8f2a19554198d2e2c1980454a2b8f61f307772ff","sha512":"9072ec7b6b3efd84f1ca7409fb97f312d1a5731ffb9e2211bfb94e459dc9d92c6a260ca5f19ab994cdaee99153a3ad17194b40c26cc7545cb6cc4fee6fc5934e","ssdeep":"192:obNAW9Q/ok/Z6oHEwnklyK63TzFlT+u6KUt8ICBtlyzos7PE:kA3dB6MEwnklyK63FlquYKBXyzosQ","tlshash":"5de19dbe213a9c21cde70b3f31b7dc018a44d855d06b69c996eb39903720085e4e9e3f","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.169689Z","times_seen":1834,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/mayapada.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/mayapada.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 104530\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-19852\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dId2LxqqOgpV6RCD2ghtYCkZN%2Byr%2BJNvvCl6MI3fP0xNIASlqoGM1xDSAAA0FWjwwj0lcZmBFKDQlqFiUT%2BAjK%2BP1vvlFeZ84ItuQlClyqMPWXOXyXW%2BdCo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405874ff956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2034 x 243, 8-bit/color RGBA, non-interlaced","md5":"f2b5380312aeccf8c2c4206803a34c35","sha1":"9c0ee8168cf210ef7dcc9c3bd53c4c53c95086bf","sha256":"cebd6f6ab8eca3dc7775e635c5ab736748929e85cc18b27d74d5e1891bda2aed","sha512":"6cc345b8ed719517257edf9062c0304b9e62cb76873502cf76dbe975ae6e1ac5327c82a5b3b2477ed0020c3cdc62beaaabf709b11ec67af1183a82ab2833cf69","ssdeep":"3072:D5gULioBTCAu8IeCY/2GujqqksoZdXTfD9IJG:DrioBeAl5s8dXTfZqG","tlshash":"37a312c1070f98be1d3fa64faac7649420bc713905ad7cf8f93693cdc31a5247a1a25a","first_seen":"2025-03-10T01:18:36.774437Z","last_seen":"2026-05-31T07:43:47.592932Z","times_seen":111,"resource_available":false,"data":null}},"time_used":1165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/css/components/loader.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /css/components/loader.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-b86\"\r\nexpires: Wed, 10 Dec 2025 08:01:24 GMT\r\ncache-control: public, max-age=2592000\r\nage: 77\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLLEq8IAgNDm%2F5F1vm1EXNeDDCSVVS9IqyFmFDW7CX%2Bq%2BR9wUlkPP47cupsbc%2BZMLc3Daqx6jzeGl9XLKy0BJaKudduWwwAEenrImodDEOHZ%2F87Vd8jlLzU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40590688d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2950,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2950), with no line terminators","md5":"f81874edee808f64a81f1c1994902cbb","sha1":"3077fa00bc4fe56438a060eefcea27e910563c74","sha256":"2f75efe3c598d795e95fade1746451bb15e1e950724f34155195d4d6e93180ae","sha512":"58e8cff6f6ac4cf5e774156acbce75317be115694ab77006b157fbf8beff629b6f0a70421cd8535f937e0385091998263e9c3e36b11a5f0624711e5d709df6e2","ssdeep":"","tlshash":"025133390a025411c157cf9261c57f69042ee9276a334d5ff2087bdcc7e295d23a5f9e","first_seen":"2023-04-13T17:56:31Z","last_seen":"2026-06-03T16:38:17.850869Z","times_seen":1886,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14217423\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2F5a2d1jp7lg.rudaltoto289.com%2F\u0026channel_type=code\u0026jsonp=__lhrd4kfv7c","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14217423\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2F5a2d1jp7lg.rudaltoto289.com%2F\u0026channel_type=code\u0026jsonp=__lhrd4kfv7c HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://5a2d1jp7lg.rudaltoto289.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://5a2d1jp7lg.rudaltoto289.com/\r\ncontent-length: 387\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":387,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (387), with no line terminators","md5":"debbe84e0f321650b9de4b128062851e","sha1":"246ad2189c18469dd12ad30c447ab53cdd72ecef","sha256":"2c7bc216ec655868d8560dd645373a583772e28e3a881665483bf8c454aa9275","sha512":"c5c0c64fb1a4b270f4d685fa1a9303ad471fddb10b8ddbd68399ee16733d6cc7587cc0fa2d5d0748f05b01c7f20269d369022c13e956947d1e5c43ec14f31749","ssdeep":"","tlshash":"f9e06823a616697166c1a3f994043d17f938126ae4045cf8baae1720674e3cce32450a","first_seen":"2025-11-10T08:02:24.806396Z","last_seen":"2025-11-10T08:02:24.806396Z","times_seen":1,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiH4g6ZhlCfqq3tOuNdyeVIBAyTm8v3IHXIBsKioUD_WouM_oR5dcwe7myx0yZ-S1zKuO0Uw9Ge5Ii8iWu3DC1Stk_-f5jA_Pd1qAVl-w0G1sFlIyLORShOoAlDROxAwzUt_qFYkAy90TLMXxzCQkvuQJ573IZaIswQmJBIHt_pk5WxnQOOALkfY19FRg/s1600/bni-online.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgiH4g6ZhlCfqq3tOuNdyeVIBAyTm8v3IHXIBsKioUD_WouM_oR5dcwe7myx0yZ-S1zKuO0Uw9Ge5Ii8iWu3DC1Stk_-f5jA_Pd1qAVl-w0G1sFlIyLORShOoAlDROxAwzUt_qFYkAy90TLMXxzCQkvuQJ573IZaIswQmJBIHt_pk5WxnQOOALkfY19FRg/s1600/bni-online.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v13c\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"bni-online.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 8532\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8532,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 145 x 87","md5":"7be6fc8d27871354f6216277d5728f44","sha1":"914ec39b099172c7302bdb0f020ab992d019ebdd","sha256":"f8d2ed5e27a907356afd2e13eddb46f888032af496eddaded03ca7172d60e425","sha512":"fbb5c0353c61f6260c84709660a06c920b76243a8a4750c8c39e0edfa11fcbd6ae6f74b87523c290494b5391784be7fdeda9d16bad60a88784c17470eb8fdd3e","ssdeep":"192:6YB7F2RXHHhvfsTAvm05+JlPhdBH2zl1JExU65wnloMjedoh:HobvfsbZdt2p1yfSnlzjQg","tlshash":"0c02ae574a40ba03d0f3ff081ba36dcb2b29855c9ff0f998814984d8aa440be58517ef","first_seen":"2024-08-19T20:59:40.107095Z","last_seen":"2025-11-10T08:02:24.808344Z","times_seen":4,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/jflickrfeed/jflickrfeed.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/jflickrfeed/jflickrfeed.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-5b6\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ly9wxvgW8M0lazCRLwNlHqvG1Epvv26UFMCOkpMXRiDlpNTOZS%2FBKnz4JdAtnloxuIOTqNjLeQ02vrSc0vqrv%2B8DOlN87QRkon8j3Jyc2Zy0vRszZbjPuRg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587883756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1462,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (425)","md5":"847c6b884e569004695666dd6e90fd0d","sha1":"0f83977484c914c85ba813adb9c46506baf4a83a","sha256":"796951855984fed308feec350d31ea2ac1382b2c6aec06412f9c33e1c13fe075","sha512":"1dd14e40e94dde8ab70b5d2e0293cda5f91376703dcc2d2a4b3174ffe270663a0448377c7b8334f2195222e8e3bad39d58e27314f4a59b077a26b8085bed450f","ssdeep":"","tlshash":"623122005c51a1fe16ebb7766d9f13380f318301c868ea52a7e6c171687b1cbe573d40","first_seen":"2023-03-08T15:52:17Z","last_seen":"2026-06-03T16:38:17.983796Z","times_seen":2091,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/fd468eb09fcf/main.js?","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/fd468eb09fcf/main.js? HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=v6SzRv3h5bg9KcqtOVzwvOSxGfbdpFSsNbciPtVKXWK%2F8IONCK0l7qvbjNpUZxfdC%2B2FBIrJBQW6Kqfg36CiyalIMUjQCYq49OQtVceyddUM8Qa0GtzY2%2FTkIjOMZfuYo8MPZ7CcNZ9xDptf0Kg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 99c40591594c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1314\u0026min_rtt=516\u0026rtt_var=404\u0026sent=972\u0026recv=214\u0026lost=0\u0026retrans=0\u0026sent_bytes=930844\u0026recv_bytes=55944\u0026delivery_rate=32114538\u0026cwnd=93600\u0026unsent_bytes=0\u0026cid=d8a544bd63584766\u0026ts=2128\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10059,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10059), with no line terminators","md5":"8e5355fe2142bc0cd54d0ee00358ada0","sha1":"2950703916e228af24716d8c0ca3a1158e112903","sha256":"e4f341eb43aefab8c96f77b7b2b9127a533998edbbd3ed15b2498c842cd016fe","sha512":"166ef6a4f7d5759c3464047ff64c14b627257b95ff8275c725ff0fcc2f5f259c6850a058ccef3e8583ae7c38ccc895f2ab37b1000741e7453ead3b76768ba06d","ssdeep":"192:Fw3J1n76/NFr5ux1xADOPlWUY6M9hpXIT2wAh+Rj:Fw3ve1TbqdWUr0RwAhe","tlshash":"7222d68ebd5c682119f40c710a77b9cf073f8b925454bc55da128eaabf24b6c2c5af09","first_seen":"2025-11-10T07:45:38.081567Z","last_seen":"2025-11-10T08:02:24.810068Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.5/customer/action/get_configuration?organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026version=1345.0.1.152.462.119.4.1.4.1.4.27.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.5/customer/action/get_configuration?organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026version=1345.0.1.152.462.119.4.1.4.1.4.27.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Mon, 10 Nov 2025 08:11:25 GMT\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\ncontent-length: 2303\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7079,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (7032), with no line terminators","md5":"c4f80fd286052f5aa81a7381bd846f13","sha1":"607e1371d2ebe011d747b5d2150b1fcdffec1aef","sha256":"a6594dcdfbfa3ce6fbf3c0c1704a753e35a4657fc62d9ba92d56ca4183098937","sha512":"d8d2da6a9d8fd1ab3db8cfdbb070ab0dc55c839aa4e6f31c29f403ffe9d1a5116aa1fdc1e607873e9d92d3fdc870003b0c4762ab1a01d4e3b94400253f904bf4","ssdeep":"192:cGsXGA8GwGBwU7NL++4zHda2D2+ce7bxK2:cGsXGA8GwGBwYNL+9zHdau2+ce7bxB","tlshash":"4ee1442a834bc8bbb373925662c7b60e742c4179b5f95d3fe460c770a1872c7d206d9a","first_seen":"2025-11-10T08:02:24.81089Z","last_seen":"2025-11-10T08:02:24.81089Z","times_seen":1,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhM_krzMo0F5UdxaY6XKEdBt3uGbAUqTTJNX_ABC6R3QoyLlNutgWkQgoE56pPQ2ViZbkpd_1x2u95yI_nZqkVE20PMCErU0JFqZz27pwMBiFbbk4aX8oLrawtzWYT6vCHvzu2xm2MNB7i764myhN_BajBiVikhQAU0nJeRuxsBFTRo9v_f27BDdEDB4AM/s1600/BULLSEYE.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhM_krzMo0F5UdxaY6XKEdBt3uGbAUqTTJNX_ABC6R3QoyLlNutgWkQgoE56pPQ2ViZbkpd_1x2u95yI_nZqkVE20PMCErU0JFqZz27pwMBiFbbk4aX8oLrawtzWYT6vCHvzu2xm2MNB7i764myhN_BajBiVikhQAU0nJeRuxsBFTRo9v_f27BDdEDB4AM/s1600/BULLSEYE.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"BULLSEYE.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 64880\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"6b541709ae3fd39cee4c3e94a68c276a","sha1":"0fff26552698ebad388a51f96403317558161f5b","sha256":"5df403f9b7e17edbf5c8ed591e5fc7de3ed13e91c6ff79bac427cb6841b87bd8","sha512":"1045d5bab6476f4f8c20e55208a4262ccfc3d3c834ec296a05776ed9f507db0e48c3224843ac0a19e38c97e30f552ae8c7bb7f0db9134080f4b2914f6630c51d","ssdeep":"1536:XJu91M/6oNemBgSwyiyHIxHRvtbFay+QdTmZ/N+qUgQwDNMRH:mCSoNRLwjbvt5aydlmrI1wZ8H","tlshash":"a753129d6083004431581380ee42b2e4811fc29fcbabdaaf820da57bdfba296f750d0d","first_seen":"2025-03-10T18:34:18.315726Z","last_seen":"2025-11-10T08:02:24.812815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":612,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWe1q8fVxn5ZkKd2pTdF3YFAy0sI3fJUEEZqga7QXYD70Im-_PoVLzYzvqDHJ96X32CNgGUyxA9D-4WbVc2027KnP_SlCkMsokk5mrspDTA5mDiSE2wr9KnMCQpyz6D1tI4s3W5s37f2xXhtWC63g2hnudEx6lCLM0X2rnV8PZdhdO8U43Jljg04lySg4/s1600/OREGON-6.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjWe1q8fVxn5ZkKd2pTdF3YFAy0sI3fJUEEZqga7QXYD70Im-_PoVLzYzvqDHJ96X32CNgGUyxA9D-4WbVc2027KnP_SlCkMsokk5mrspDTA5mDiSE2wr9KnMCQpyz6D1tI4s3W5s37f2xXhtWC63g2hnudEx6lCLM0X2rnV8PZdhdO8U43Jljg04lySg4/s1600/OREGON-6.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcf\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"OREGON-6.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 86016\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86016,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"9eea124b601034928e5323dcdba55cf6","sha1":"d8d32fa5f94cb3aeca00f3dd6eb4b07ec3e157be","sha256":"26c930d341a50ec7472dda3aed0aceaeeafdae3c24a4a970b785e3e990fcc5aa","sha512":"14bbcdca1546fd45a9ce1e807326e6a9ff84674e3802fdebfd2e45bcffcd95ca2e78398fc09c30d32f5f004630deaa2f0df4ebea6c3bdd79165db9d3f7ee6e97","ssdeep":"1536:o3EsJxzt3dFxasKGEo2tqH4q8fz9Et+vDyIfMnQN2Meqh0KxOOf4WA+QZebl8KWY:B61djaF7gH7+DyQLpTxO44ZTy","tlshash":"9c83122217d0ddcb47303e9c60c3f254cd549eb21548357a267d24be738f0b6aa9b8ab","first_seen":"2025-03-10T18:34:18.345305Z","last_seen":"2025-11-10T08:02:24.813607Z","times_seen":2,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":618,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7OGWM3PuIZwpM52DdJ-d9mCHW6wZxQcSGtgrXNnCzccfwKX8XsNhB-Ywd2wweziqvCD1QlUqa8WoXK69ClIOxiznr-PMak562pMX69xU-1nUYO30fGfoQNLR_4lC6h1FOhDVdD4gSGPng51aSPf5JSYd-GFSdHkWFZaa5VDQAfo6Bn85zASWfNMvw0Vs/s1600/SINGAPORE-SGP.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEh7OGWM3PuIZwpM52DdJ-d9mCHW6wZxQcSGtgrXNnCzccfwKX8XsNhB-Ywd2wweziqvCD1QlUqa8WoXK69ClIOxiznr-PMak562pMX69xU-1nUYO30fGfoQNLR_4lC6h1FOhDVdD4gSGPng51aSPf5JSYd-GFSdHkWFZaa5VDQAfo6Bn85zASWfNMvw0Vs/s1600/SINGAPORE-SGP.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"SINGAPORE-SGP.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 75557\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"99064e7e1d96ac21d9ad345de4c867ec","sha1":"2a21e093ad7f4912876486d6078df7d1377c9963","sha256":"566f232bf583eba86c3e60f172a9a15dbf5e4169a20e6efaa8415685ee9f5bab","sha512":"20313d722fe3b68d0649e40fcc450a926a13a053868d4c7118622c7bab82c1d934e08f181abcb348f9b25c00fcab85961b8a392204ecadf6465d93c31c791451","ssdeep":"1536:6Tr4o0hyh9Ok5A4CwlWjqM6A5uSh+q7jqMGkD0wFh6FvRBfchdmxkfwfvFNLR0Qu:6Oyyk5EwlWWAX++mMew3uvRpch5fkvFs","tlshash":"52730291ee87ea929d4ec0d181accd6cbabb33197a1000f01c5dde2f94deb0715f5988","first_seen":"2025-03-10T18:34:18.198931Z","last_seen":"2025-11-10T08:02:24.81435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":615,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/animejs@3.2.2/lib/anime.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/animejs@3.2.2/lib/anime.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.2.2\r\nx-jsd-version-type: version\r\netag: W/\"43e8-Znd/luYBWv7yja3LqDVBe3VEe8w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2678958\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\nx-served-by: cache-fra-etou8220165-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17384,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17281)","md5":"0606761895122abfbc5aedd28c47dd34","sha1":"66777f96e6015afef28dadcba835417b75447bcc","sha256":"b5ce1be3c3f530f192e0f2571d1942846096d66119cbada34bfdc912c4873f35","sha512":"42db6dfcbb009496df5d57cdb242c2f978a11d0dffb849e97f23437095d2682a4a37e3ce9d155fb4a73d2d2cfd64d01a8ef201fa74b7dc259c78bb8c79cee99d","ssdeep":"384:/CLZbIqdwjADnSVNRRJ8pB9seTOoIGb3b1Gps6U7XDUWTam:mZbIqPQD8p/IGb35czyL","tlshash":"8672c9cc32c2b047439396b2c56f144bb33e6d80646da890e629f1e93c3495d997bfad","first_seen":"2024-01-12T00:39:06Z","last_seen":"2026-06-03T17:27:51.497222Z","times_seen":599,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":84,"dns":1,"connect":26,"send":0,"wait":27,"receive":2,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/azl/logo.png","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/azl/logo.png HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/assets/css/azl/azl2.css?v=1762761616\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 4023\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:09 GMT\r\netag: \"6749249d-fb7\"\r\nexpires: Wed, 10 Dec 2025 08:01:24 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dA9a3GCsn1OpoROrOPU3r5cDmeH6HhCDmUPcvaXDij0hgOD78n1AQ%2B3awaRJbC1p7NsnhNnEWApnaNvdvGcqF1HU4dOukzQug29O2mniMe%2BXnSlOAVbvbLk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c4058e0e8256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 63, 8-bit colormap, non-interlaced","md5":"229288e13972bd2c77ee0368cf1670b2","sha1":"03d482f7e013b25937b204e755ff30e1c5049635","sha256":"59f0de4aa4225d044c7f64355193e8f89c63f3fdc66f36119007450cab468348","sha512":"efb0141e2400accc703ef79d41e98bb8845de921977140699a2b4e0a1bc2d1c943865eb82360b1057ccd3f553c9815acf339ae116a347e15738c7775d1cadefc","ssdeep":"","tlshash":"3d814b543ce59a68444db3e9e345c371bba23a2215145241ccc32af078b5f57dadd6b2","first_seen":"2023-11-05T12:09:26Z","last_seen":"2025-11-10T08:02:24.815874Z","times_seen":3,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD51tY-pS-VrDFUaI-icvxhiwEX96IdBF26U0W6pHFNc4LG5imTxeiOFOFM2IutXlfaSpglPJXMzTIA87A8Yg_9zalTUfmPzIxa81PKGj1ZyUcm7OWDqVioYmdCcQdpWtpme9r4FZUkR4aNFE4YHNkgsXx8WRT_2GoRsd3txg-sSugez7iXMmhjHebVsI/s1600/CAROLINADAY.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgD51tY-pS-VrDFUaI-icvxhiwEX96IdBF26U0W6pHFNc4LG5imTxeiOFOFM2IutXlfaSpglPJXMzTIA87A8Yg_9zalTUfmPzIxa81PKGj1ZyUcm7OWDqVioYmdCcQdpWtpme9r4FZUkR4aNFE4YHNkgsXx8WRT_2GoRsd3txg-sSugez7iXMmhjHebVsI/s1600/CAROLINADAY.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcb\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"CAROLINADAY.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 69085\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"6e2ce82d156d6ab13f05969f95949e42","sha1":"b9ab062284fa16f831ae4f6779a271d9ae93f6c6","sha256":"61ed5dc598fd7030a29ade475b24343738b4684d1271ea9fdc77bfe203eaaee0","sha512":"2b4f1c4f0d4265ff66770edcba50d47b737b09bad73c513cd45cb845718d931083b13a8a3337d2313ecbe208618d7a49d12fb94f7772d6d21587feb7ada8071f","ssdeep":"1536:kdU2YPBUN/fMvQ/vUDb56HNl73VHvtdTSnqOFe99u5v:kV58vQ/u4HzBv/TSqeag","tlshash":"996301c5d6e5bd7782ef0cda88b9ef240fb4e89b5b6e0b887450d13203017ab9d15764","first_seen":"2025-03-10T18:34:18.211221Z","last_seen":"2025-11-10T08:02:24.816571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":662,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.DeOPkGJv.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.DeOPkGJv.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOG9LZscgduvR3t1Q1Tzc58BKMo4UoXJsJoH-OCtK8IkwS0Ozn8ZvY3I5IzwxbgqHRWZ\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\netag: \"3ee1af304696796b6cc8b349da18bd0f\"\r\nx-goog-generation: 1762425812990181\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 432\r\nx-goog-hash: crc32c=+Njrxw==, md5=PuGvMEaWeWtsyLNJ2hi9Dw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-length: 432\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (431)","md5":"3ee1af304696796b6cc8b349da18bd0f","sha1":"f4560c3c726ad0f0b5d160b6ea7453b2e2e56f14","sha256":"efdb2de47ce63d851c407a5f39fd274769ef284f707b40557bdeacf56c08755b","sha512":"1b1b14fc8ce596dc975c59227d132f687cb467027d8a6695a314ab6bd790180a9e7f4d743e32747806be17c769dc9c9ca31b73af1e477862331c9d9119fd07b3","ssdeep":"","tlshash":"52e095daa74039e7f6d5cde4c401e0e54af6239247e283b0d0de63728318031ca19a16","first_seen":"2025-11-06T11:41:58.560649Z","last_seen":"2025-11-10T08:03:20.126006Z","times_seen":411,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.B0_QvnEW.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.B0_QvnEW.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOHSffNpfW2Gm6b44mGx0Hd4pEPvoDcLME4euEwUf5bzR8J30AntuMKUBncrrBSLIb-KhMt4BRsxlhc5mQ\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\netag: \"bb2424b90285d46f921f699e7b3d17d5\"\r\nx-goog-generation: 1762425812791044\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 886\r\nx-goog-hash: crc32c=LRbwvg==, md5=uyQkuQKF1G+SH2meez0X1Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-length: 886\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":886,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"bb2424b90285d46f921f699e7b3d17d5","sha1":"412e217bd4cfbafc553fc36b9094d0ece147a429","sha256":"2b1840010c419cf6839e4a18ffd0eec542b4c0d0c49ce5606bf93639afda5ff5","sha512":"f283f440d13fb69e25c115fd3e9dcab60cf937ed1ad964644f9719abba510e9f99ac82747ef2aba6991de08cbe10a8965c0d352c380dfa471d2b6753beba021f","ssdeep":"","tlshash":"a41100d93cc3d8b0d73bd4cc52a899e6d43c0e88a8fd41c0e4f86e853b155b18236ea8","first_seen":"2025-11-05T08:48:35.692413Z","last_seen":"2026-02-25T11:20:48.331177Z","times_seen":7795,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxOfpgusNMKFeLtxfENEbkxa8832LRWP2NAGTyhAD7RxmZ9UmiydCc3ymerPYBCGGJA6dJfeE3MFeJ14ubLppXR7s1TO1HlhmjtJSPe4zgosbSklQTqJvSyYDwutmt5L4tx-iIMDuN7gJ9M7d-sv-wX8ByP2l_zkDLlbZEGiJSRZvmqJM9ZXT4XEFneZU/s1600/singapore.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjxOfpgusNMKFeLtxfENEbkxa8832LRWP2NAGTyhAD7RxmZ9UmiydCc3ymerPYBCGGJA6dJfeE3MFeJ14ubLppXR7s1TO1HlhmjtJSPe4zgosbSklQTqJvSyYDwutmt5L4tx-iIMDuN7gJ9M7d-sv-wX8ByP2l_zkDLlbZEGiJSRZvmqJM9ZXT4XEFneZU/s1600/singapore.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51f\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"singapore.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 50860\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50860,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 120","md5":"f79c3e7a62c4750fc1dc5ea9daf36b7c","sha1":"06b6ff2509da884d1bc060e27799d2e8e09b214f","sha256":"ba5457e00cddca5e62ec735c87e6a03e16b62ed7ce5836fe63db467c0a52a23f","sha512":"0e195b8f81b039604924c86ab278bf33c1ef89c09cdf37e96e157a25dd30ee85b27d52b9a7af4e1c2f3ab09c791a99dde22c820c3c9e6d5c2e2b6f2c85bef9aa","ssdeep":"768:nKSB93z7dJhtrK6lOaGQwCfB+9BEfoopnE5w2ZJYmxo1nyGfYXvdh:Xj3PhA6k1T9x4C7JYmmyGch","tlshash":"9633013b6c789018c31215c10d0e6e6da24f4cdbdac67cbaea4ee96ed9a043d345d61f","first_seen":"2025-03-10T18:34:18.343448Z","last_seen":"2025-11-10T08:02:24.820497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":111,"dns":2,"connect":21,"send":0,"wait":470,"receive":2,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\nage: 2912882\r\nx-served-by: cache-lga21978-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 244394\r\nx-timer: S1762761683.100206,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-03T16:41:22.357103Z","times_seen":164537,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":105,"dns":24,"connect":26,"send":0,"wait":27,"receive":8,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8YhuohyphenhyphenSKKCgVf6-0oEww0ArmKIyZr0elq-VEtFzZE8HofKjIhhkt3esP2yt-6FuHO-hv5pmufFC5-esg-rHmft6MLxcb0Lk7UrShQUJx4-g86MyNezLO-J9ZEAn4Bcis3zxsqwckW-0cB6_h11_ppV8cFth1Cg236_imnsBenjPMV8DYLnAQQiC4si0/s1600/dana-online.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEj8YhuohyphenhyphenSKKCgVf6-0oEww0ArmKIyZr0elq-VEtFzZE8HofKjIhhkt3esP2yt-6FuHO-hv5pmufFC5-esg-rHmft6MLxcb0Lk7UrShQUJx4-g86MyNezLO-J9ZEAn4Bcis3zxsqwckW-0cB6_h11_ppV8cFth1Cg236_imnsBenjPMV8DYLnAQQiC4si0/s1600/dana-online.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v13e\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"dana-online.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 8389\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8389,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 145 x 87","md5":"b00a1e9a0c0d682136471548f36215f8","sha1":"0903cffc71851c2ebae0536457f47e6a51a7277c","sha256":"233f982678110150284632a79fd9bd3d258d69aba024bacd9fc6fb268659afcd","sha512":"902b8625e3f0fede15758418a7dcc3be2961dbeb0d570f7f672bc51d5d4c25f513d943f1b62a1bf4b87dd6c38e126611cde73f7c44495847ac035f26103ddd0a","ssdeep":"192:fu7F//fsJefHal4zM2TH7+HbcbO+2P4P/f/h4MQFQPRa:mF8ef6l4zM47+7cbsUf9QmU","tlshash":"2f02a0ae2dd2e04508a1f6f5ded22de7d91e45e2e954e420f08df9b5bc910730105fda","first_seen":"2024-08-19T20:59:40.108795Z","last_seen":"2025-11-10T08:02:24.822108Z","times_seen":4,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":638,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/bank%20jago.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/bank%20jago.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1927\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-787\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0qupO4VWYrZjScMsKZhvUbfstEDyCHthFIfOS44hjgz2hDiEJTm8mKwmiEAEotve0crAnj1Z3a3zNQojhSEtwMicaUqoVQO0I3iX4rBRgRGPW730EIiP5FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405873fe956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit colormap, non-interlaced","md5":"762ad8c7d55a59ab72aaefe6e252688f","sha1":"5a5cbec375d9e898e08ab351cdfee78faf2e56eb","sha256":"af79d64e86faafdd56c113838f3b03ee84c26719658a12db6c31ba18a3831135","sha512":"f89797d67462ec548e52c7b1c6cdcf4b12dd71e602f00f649490739069619d3ffecd7f34ad91baff4f955389300b76615a71a827394ed9c4f5b9fdb23106242a","ssdeep":"","tlshash":"df410cd6676f4ca7f02c8af6a5162cf2d513c12e1381cc098db1ad9dc38d18c79681f0","first_seen":"2024-08-19T03:13:12Z","last_seen":"2026-06-03T14:38:23.067861Z","times_seen":609,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4a93T9l23aNHS0jLYBd89bB1rMmvRtcghIG5sdtBwerP1e4OSqTGxr2OGNYhzW1AJ6tQsQdocrel8XmYr4IqLIvpsYBFNF-x69_KOIakj9p0mQcG0oIeySJhGr_72SBjBoUeAcBO9LNyEttrh4JxMamhYGu40tJULknnBBKieIJTKcLIAX5E-nJ72QvI/s1600/EURO.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEg4a93T9l23aNHS0jLYBd89bB1rMmvRtcghIG5sdtBwerP1e4OSqTGxr2OGNYhzW1AJ6tQsQdocrel8XmYr4IqLIvpsYBFNF-x69_KOIakj9p0mQcG0oIeySJhGr_72SBjBoUeAcBO9LNyEttrh4JxMamhYGu40tJULknnBBKieIJTKcLIAX5E-nJ72QvI/s1600/EURO.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vce\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"EURO.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 55710\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"faf81029b365340fd7ed82d94aaabc7d","sha1":"ea1409528bbb5b8d7ab0db0d3211403fb752ccb3","sha256":"f1e4371b7cf566588d4bf955d8fa9a35fc58e1feb758f38f7bf53eb90308e212","sha512":"f3c103098fe8d58acd6dcf5e1d6b235fed1c4b0a5b914ba0212bfe283ad3e602005bcb39cbb91f22f47fe3337285c958358e5ba15b9724b934f6a3bd3d063486","ssdeep":"1536:JXKwY1hQP5HGejQAzQtK7OOTT4VVmvPxIj/:JXKwwQBmejZsK5Yjqpm/","tlshash":"b9430251e52585cdbf6bd47702be6ab579a72b432913ccc6dce0c208e562438e82bed0","first_seen":"2025-03-10T18:34:18.283785Z","last_seen":"2025-11-10T08:02:24.823679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":668,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.qTo0Vyzk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.qTo0Vyzk.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOHrGgcUXGZEtClx7YxHPfdo0oULP_BCD3ubIJuJOp7gcktQJFrbO399oWmgroRYsdRE2f6Rjm8\r\nx-goog-generation: 1762425812309141\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 52721\r\nx-goog-hash: crc32c=j9Bw9A==, md5=6jlkgZqARHSoNndry5kK/Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 19108\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":52721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36601)","md5":"ea3964819a804474a836776bcb990afd","sha1":"b2b07d0f70379ad97271f00ace082ee003c255b9","sha256":"02c09b2760b9a2773d71605b8d8a4009425d35d84e11f193b4c951e72268859b","sha512":"389c15ad761f4878155575187b18f90d967b6fcff78aebe2bf9faa180ccd7c02b220f22cdeafc68106a3141df10737613c34ec16cf71bee910d97000b4038fc3","ssdeep":"1536:Wqxd3XXvvShhHTczlR6ogXf6tM3r3B1x1:nnv6hCRRaf6e3rF1","tlshash":"e9334ddfb281713157e315f3b06fa106b636292d384c80b0f629dd9925de44ba22bf6d","first_seen":"2025-11-06T11:41:58.413213Z","last_seen":"2025-11-10T08:03:20.087284Z","times_seen":417,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQzegsmMfY0uKZB6Ogwo809pz89dUfcM3c9sCmEna3qA6PpLqyhRaQLEyVizGQs7zKNonVzsn-12XA5HLa6FIVPOWrH2O7UibNDB61HPH-ig3538VKgeZFIAGVKgB963MXkbtuCDX5G_-bA4C9f7dFole1HZnqQiTPSEuhDby8GBb7dnbxEG2gOFid03c/s1600/pragmatic.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjQzegsmMfY0uKZB6Ogwo809pz89dUfcM3c9sCmEna3qA6PpLqyhRaQLEyVizGQs7zKNonVzsn-12XA5HLa6FIVPOWrH2O7UibNDB61HPH-ig3538VKgeZFIAGVKgB963MXkbtuCDX5G_-bA4C9f7dFole1HZnqQiTPSEuhDby8GBb7dnbxEG2gOFid03c/s1600/pragmatic.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51e\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"pragmatic.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 96975\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96975,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 147","md5":"a641eb2e6f707866f7b3d4e57687efb4","sha1":"b219718652d2b1d14c7fea09c148cb99bae011af","sha256":"30a4cbedd68d3bd2dd047e2c70f5db96ae87fc47451620f896e1c1ac774e14d7","sha512":"81603134614bf74b9a7a7a16efe9d6761a75e57619cb231b5a23c98bb991c5c8d1d3c5b31a3b4a016bd31c4dedc455806734427b9573931cf1f2d15b23a76a6d","ssdeep":"1536:56bpEaKZXO9B6b+qwZURmriLQaE4S2mJRe2pALz2+76wiBIm8Jvfj9:2aU7i+qwi5Lzw2iRh++wTm8Jv79","tlshash":"2d931265c51997efe45a6a7403533fcb10d8e98a8f59e43ced15ec9a02c00eafda2e41","first_seen":"2025-03-10T18:34:18.225779Z","last_seen":"2026-01-06T14:19:09.770243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":386,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/permata.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/permata.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 6567\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-19a7\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2Fq9KNIJ4LxAtM4VM1CePIz98H6Gj%2BkKRjShmiVPWkKKLWlXUdxhIrswqL9ob6JXWNEI%2BT7KtiEukjFX2jXrndYF6cfb%2FqNbt7%2FpGsPJ29UN3xdNeYfeFWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405871fc656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 102, 8-bit colormap, non-interlaced","md5":"f5f8c69e95909040ed44250cc3b86c35","sha1":"e333b452f22bcfd8368091118e301200e7f4f2b3","sha256":"bd3ce223941f0e46a5f2bf3a048f36d65b57a595d3dfb06762799d4c2b37121b","sha512":"3e58bedf161fb95bd4bdf89f95d224d1d68ce0d14de5556293074d188104dd75b4df27a8c84def1d61912b703e2041c0be82b25036124bde460f7e00c67781fd","ssdeep":"96:rV8AamRQJAK73Mj+vuR1Mz31Tgi5NlPiuwPvMXJp+b1IU3SZVaw/sJUt+sxczRw3:Z8Cy4q1fPkPvMX+IUkVaEoUt+sxqw3","tlshash":"2cd1aeff3698bcfaec63ac58c330bdc0463e6c91643714789d19c9506ec5998d080e97","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:21:47.989858Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQXjSe-NwVnIIEV8GlA20eq2yfxlmG2X4yDWnw5mqdLxINrRM90nPa5ImPQBtlWslpuicVf4go9eRun6P7xKR5-NLj5HinQ4wbjqKAZ5WdqKFdWw7R6qMq60b0a0AQJ5Ckgfax7Gno4aY5KX9TVpMhK-EZ69kqxNDiea0L__t6q_LRbR3oFWeQRAjFy28/s16000/VIRGINIA-DAY.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgQXjSe-NwVnIIEV8GlA20eq2yfxlmG2X4yDWnw5mqdLxINrRM90nPa5ImPQBtlWslpuicVf4go9eRun6P7xKR5-NLj5HinQ4wbjqKAZ5WdqKFdWw7R6qMq60b0a0AQJ5Ckgfax7Gno4aY5KX9TVpMhK-EZ69kqxNDiea0L__t6q_LRbR3oFWeQRAjFy28/s16000/VIRGINIA-DAY.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"VIRGINIA-DAY.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 61863\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"a3d1ec84d1dbdf6401cb95b388b94dd9","sha1":"41ae22b0d0f7140c09a4da8947f4edcf2071c4fa","sha256":"a85107dc2fe5eaccb110f82f3995ff98b82620e064b2b4b1b4c4eb80f16a47f2","sha512":"77eaad5d1e76c2b27661811085f5e5a14780bdba63225f474be4ea5840c08cd677ce4e0c99bcdd3abdd9e042c6da2f11608eb32bd22f66cc579d56b6d6b69697","ssdeep":"768:tQGkIOB6XYch12qZVe7ASah3B1b/rfzyDZU93I6D80BEkoU3v61OjLnEpQoy6YeR:Hntn27GP/jmZUo0BL61EwpQ+bEwoVr2z","tlshash":"185302eb509e9f73abd2c747b8551a3f0826004641a28c07d2c7bb9a2fc65c267bfd14","first_seen":"2025-03-10T18:34:18.347487Z","last_seen":"2025-11-10T08:02:24.827041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":656,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.livechatinc.com/v3.5/customer/rtm/ws?organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.5/customer/rtm/ws?organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://secure.livechatinc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: WMJ7ikW7BpM60A8wG3xTAw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nsec-websocket-accept: 6kCYV978wMHW3/JseP52p9Eium4=\r\nAccess-Control-Allow-Origin: https://secure.livechatinc.com\r\nAccess-Control-Allow-Credentials: true\r\nDate: Mon, 10 Nov 2025 08:01:26 GMT\r\nUpgrade: websocket\r\nConnection: Upgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":1,"connect":2,"send":0,"wait":140,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/azl/azl2.css?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/azl/azl2.css?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb23-18144\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 9\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BxvrCEOnq6IQEcsgNz20QXgH%2FhogJ03BhnqMy0l1fbiNNzVeCskN2PuxzrhUUB%2Bpfi0Qv3pgjeKKOj%2FFjplH3ae5osohDNP6RAz%2Bu5fKCkcWRpbTEvQdYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853de656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c28181aee0c8e28280a7369fea17a97e","sha1":"fec1dfb5a7ed6e82993d23134b182b38b2c60ab7","sha256":"2f04c327dc765f63987f8f57a64dc0d1f072c03842551b0674f43daf1ee51a03","sha512":"d6fe4ca155b5b19050fa3fa3b579d8a63f35d2ed06edf60d5b4087a444638a044f0d53ca7cd156bc7b88244625408ddb03faf731a6d0eb834e8c055dc54a9085","ssdeep":"3072:VU4B6ISDEek1CMAM+MzMSMQMdDMrdMr9/wioSSx:VU4B6ISDEek1CMAM+MzMSMQMdDMrdMre","tlshash":"43a343e577a91d01702bc5a976829be5377c8002d50acdbcbbfa716cae4e6c84173b4c","first_seen":"2025-03-10T18:34:18.252973Z","last_seen":"2025-11-10T08:02:24.827956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":432,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/btn.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/btn.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 66617\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-10439\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAOaaVshcujp2HtfLYGFjy9Y6bAZx%2FlC3ZpdLNqKpuL5G3V4%2Fh8TOlamuhqRObViKEglkYgtTQDWDwu73fzR0Au7hQ3I0SvDgHVZ4IBUt3HDZWu7SMXFVoU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405873fec56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1436, 8-bit/color RGBA, non-interlaced","md5":"c735fa47c7646cb1960cd28c3a9a6150","sha1":"1d787dd6e2a93a10a119d65f749f0e2a03f22315","sha256":"685b9df208c28e4c6cab2aeac29574171f3704b4a3727e6d4ac2a1e4a6495d92","sha512":"bbfe49433351157c1a2e48020d7573defda3102d52253077ff1ab7765607e09fb8504fd0208ced4ac1a61327646d56d10f7b21c593bd1d5cc88a3326d52d1694","ssdeep":"1536:oo81SHChYpPkFwMIZI7CY3ogAsiEHZyuc0gkzEqZExRt:ooBXPkwZVuoglxcF2exRt","tlshash":"a953bf56d0178abac1a94eb2c0ff5f0bb772837b8066574693b2491d3dd57bfac01680","first_seen":"2025-03-10T01:18:36.772614Z","last_seen":"2026-06-01T00:33:20.369375Z","times_seen":181,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/14217423/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /global-mapper/lc_license_id/14217423/region?jsonp=__lc_region HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nuber-trace-id: 8057988e5f5f8152caa30a71e253403b:e9b6013f437aa02c:0:1\r\ncontent-length: 35\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-06-03T16:38:18.011678Z","times_seen":27600,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":62,"dns":44,"connect":1,"send":0,"wait":134,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNRlrGqUp7eO4QVAdi_5FW_XWBKUenhcOMebw__cAlY-HjGbyS_M_oHH0HDLd8IYMje0SAC5Fchloy4rymy5WSZnDukT0bfTFS1QmUL5Fg1t9zObpOSyi6mMdOHDX1hCxbSkHPvUMROqKZp03OTJDBSKBCfkhH5E2_jIXPlIlSIzltNfmurZkNPS_-Z2M/s16000/keluhan-member-rudaltoto.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiNRlrGqUp7eO4QVAdi_5FW_XWBKUenhcOMebw__cAlY-HjGbyS_M_oHH0HDLd8IYMje0SAC5Fchloy4rymy5WSZnDukT0bfTFS1QmUL5Fg1t9zObpOSyi6mMdOHDX1hCxbSkHPvUMROqKZp03OTJDBSKBCfkhH5E2_jIXPlIlSIzltNfmurZkNPS_-Z2M/s16000/keluhan-member-rudaltoto.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v8a\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"keluhan-member-rudaltoto.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 32557\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 154, 8-bit/color RGBA, non-interlaced","md5":"20506d20a77832a5ca49c8f710b8e3eb","sha1":"6f67f3377f6a6e7759a89de8e12b86edc8800aa1","sha256":"e85741bfe27dd7a0c1cc68d0685241bc868984783b9c481521d306c3af917403","sha512":"21b011a382da50f1f79648bb69b36379086b182e1b987a663298477dfab41f306637bfe67cb3066656578af810a06a5769fdfb7166d1c81d3df14811681336e6","ssdeep":"768:Mw/bD3tP5QipJQBRj3pKciz5UnwFYbKIoWfP/WKzlaV:rbD3N5v3QBRj3p1kGgYmIJfPtaV","tlshash":"80e2e166a71e59e242f602ac20c1af68f34afc2925d4e54bd07c954d680fd7bb123fa4","first_seen":"2025-03-10T18:34:18.249355Z","last_seen":"2025-11-10T08:02:24.83095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":664,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhi0chx1guEmWLknl_NKjuV6phut2s6S0PnY1XTLGQ8jzX58NgOQFYsLs4geDBMSCLU_fULUcjYf13ZYAwFXoSaAhZfw-GquwwhYCYvq0ZmePmcjgplwRLynoG32qVtsYSFjuRbUudfik6vnjEd3THsszuD6tGm9zl_i-afyVs5JzoGdS-C5WBizc70gDI/s1600/toto-macau-1.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhi0chx1guEmWLknl_NKjuV6phut2s6S0PnY1XTLGQ8jzX58NgOQFYsLs4geDBMSCLU_fULUcjYf13ZYAwFXoSaAhZfw-GquwwhYCYvq0ZmePmcjgplwRLynoG32qVtsYSFjuRbUudfik6vnjEd3THsszuD6tGm9zl_i-afyVs5JzoGdS-C5WBizc70gDI/s1600/toto-macau-1.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vce\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"toto-macau-1.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 94221\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"1e9e6f3a417825041f389deb612a7e11","sha1":"d01db214efd6e0f7629ffd58cef51ab116ef2f1b","sha256":"4063389324324596e26a4b5d5dc14b74c962504fa0f8bef70c2bfc4ba7c0c6b7","sha512":"178b8d0741629e658cd7075e8d1296c5596095b5b35521707393cb787bc1e13dfba22d7e62a75458f4152853129108d419984a2ba22af05a2df828b0aa42e639","ssdeep":"1536:NbQQGp/EwZaTrIUxwhZFuQY+Y4kz3LuY0WWKrdWB6yKyjSxPDR42M63U:dWQrItFuQe4kzCgWKE8y3mZFJU","tlshash":"2a9312a796db43079050b846870764c4e41bb1fc0e838eddaf3b9b8a2654bd7da3d345","first_seen":"2025-03-10T18:34:18.214451Z","last_seen":"2025-11-10T08:02:24.831738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":662,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/bsi.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/bsi.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3185\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-c71\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXDK%2BARzy85EyrIoTtoNn6VJnhoGOSGWGrT4Lrr7nEplTbcSpN0YeI1RsXs2rkw%2FU%2B7r6vg6yzhC4zgpyVpzeVwp7U1308nPFAYeV9M5cB1vwq%2F9sC0CDUA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405870fb956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3185,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 24, 8-bit/color RGBA, non-interlaced","md5":"b9c3e552b73597c4da15f8bf94d0c779","sha1":"9b4e961540c7f03124ecabbb629fde69dec0dc98","sha256":"1f1c5a88de516b2fd7d8fdc290a43689f552ce09d4bbbf2ab3f1394ac064451b","sha512":"4ceb2be4bab5b8a8519b6d09d024da51f5af289e1104f89a17f3a9ee45627192e728a8104fe72a9734cf97c1be09936ffc82ad43d8d9012afd359e0ca1187de2","ssdeep":"","tlshash":"47612a04b957a5a1d10d2e0720e7c62ad8330964cee4b46251ccc00b0aa40a1ef3aafb","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T12:49:11.890741Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/liScroller/jquery.li-scroller.1.0.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/liScroller/jquery.li-scroller.1.0.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-3ea\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFSeorgQq7NVMbAgAdHWvOsU3TImL6n9k017PX2FtZzxSnt5KsbkfNfNdB0Is2q%2BCNbNloLA6G6yJPp%2ByDNg51Ppg%2FOJjtRhaienH7514npNdqMAy2xG%2FzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587883e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1002,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (565)","md5":"097d12ca6affd5151d1d56db876cc1e0","sha1":"4f1b6d162e327a5e8d0f37897d4d559dbc265ba7","sha256":"e00749ed99da6de8ee85c1fa969a7571feaba5a506c1dd88be8a12e20ed680d9","sha512":"fd4f03f1ba6fddb3bba25d32d09e9713d08b55fbd11330d43e74dd874646d01a27eb6dc19a49889cea10a09300adfaf1ee0a11921d6858255f31893fa8d8fdb2","ssdeep":"","tlshash":"05119e08eb0611bf0ce5e738fe3f9b1c75f315134222d5a495fae4541d814bb5270959","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-06-03T16:38:17.957567Z","times_seen":2082,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikPTAJS7xSNlzWnXjVZNaDWx8i1XWK7gHficGo7Yeh-3PW9au5GmLibI2ieON3DiEd-0P1Obp6z71CfoT0au5nLO-GBJtnmsN1_RNc-DlVvpEQJZvrqc5AwL1GSsFWmO2mVxbpNI71EYP2sEBbD3Zro-D67ncZidjzfsWnP24s_mIZvXLoLc7d8O-FSo8/s1600/roul.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEikPTAJS7xSNlzWnXjVZNaDWx8i1XWK7gHficGo7Yeh-3PW9au5GmLibI2ieON3DiEd-0P1Obp6z71CfoT0au5nLO-GBJtnmsN1_RNc-DlVvpEQJZvrqc5AwL1GSsFWmO2mVxbpNI71EYP2sEBbD3Zro-D67ncZidjzfsWnP24s_mIZvXLoLc7d8O-FSo8/s1600/roul.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51f\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"roul.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 1286372\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1286372,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 269 x 132","md5":"b2da29ea0b01567e1ce89edc66c3e5a0","sha1":"e7ccd2bed35940ceb3b53997951c2318022bf0c5","sha256":"1468d1ffa0c6332ae600cfc5fb27f62e3bfdefe78ee409b8b9ede95d5fa3289e","sha512":"f56d490d35ada5ea42cba7ae05b9511a48806018a445723f98f580d87e400e6da2ee9ca63295ad8ef651cedf6b0d50ca5926695bb830fbab562ae26a94ebf684","ssdeep":"24576:7Gy1xgw45OpjsVi6MoMP1AzCAvii76t+KIM/hkORoGCNIN3ekQ1mys8:7Htjs2Vmbii72+FOhkGCN6Q1S8","tlshash":"b825334a300168e705b38e873f39cad9dca4544f8dd1f3b6ea4e8a31713648d765ea88","first_seen":"2025-11-10T08:02:24.834075Z","last_seen":"2026-01-06T14:19:09.820981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":409,"receive":344,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTTQlDQjSKDHyeNjRE7rsKsW_exEry-ocHlLsFQvso8lOvjq56YCIw93PxEI9PycJuGyNvpjIcU8vCme-SEqLLfH1rXYjmvWd8Qcss7UVw1aWi5mB06lrxcuq0VZF7qr2vAQsrkrTRDnai6k8UfHqThkTLyzg2KLjOj4kEfIcHErW_lt5CbIHdTA_j21w/s1600/OREGON-12.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgTTQlDQjSKDHyeNjRE7rsKsW_exEry-ocHlLsFQvso8lOvjq56YCIw93PxEI9PycJuGyNvpjIcU8vCme-SEqLLfH1rXYjmvWd8Qcss7UVw1aWi5mB06lrxcuq0VZF7qr2vAQsrkrTRDnai6k8UfHqThkTLyzg2KLjOj4kEfIcHErW_lt5CbIHdTA_j21w/s1600/OREGON-12.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcd\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"OREGON-12.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 70746\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"17385ec1a30bc9babeedd5c6e4c62f92","sha1":"e3bf3b9ddf7b2b6ff6e4f89b4da1cc07202da38c","sha256":"3e3536ca0d28c360165e6a3def907b49c846428cad7445f26a94acf5d0157782","sha512":"6a3e02d3b6020be6b8d649c0ea84f1726f498d1c8af55de0d45a7d48cf8eab168dfb5258d5bcaaffaffbf8c3c1057decc8690e1e7b42bea72cd29629fb82b2c3","ssdeep":"1536:Hawop1wEb1mF+oSF4RMRzQXHG9pQlJ/wMCNytJXlpuz:H7oJb1mFhScMRUMelJ/wBs1pk","tlshash":"7863023419c38f2a6b8ed54088ecd1eb42583bd156dc72ce5811b62e54f9bcf97823a5","first_seen":"2025-03-10T18:34:18.230069Z","last_seen":"2025-11-10T08:02:24.835241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":700,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/feedback2.png","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/feedback2.png HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1180\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-49c\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if688CtOBmfxPHhUS7eT8SOyRc50W9564kpMpJSa5rgSCiDidse9gh%2B0%2Bt%2BhhfSdOKudYRCHL0Vmyx5BIVhIJrTZtcX0A4WQOWpKTv0UuPRue%2B5F6z376i4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405854dee56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 206 x 32, 8-bit colormap, non-interlaced","md5":"76fa4b2588a14d5e8c62f70f7263d62d","sha1":"8f2510f7d96cf7a1756ff8dbcafc248bcafb31e1","sha256":"639775068932c1b628a731e51f57a420b6006929bf08058d1dd628b2b0aa1e51","sha512":"69251210bbb555159087994e5c28a3552118279bd93ad8aacd6b95a99b1331c9053653f2abae5ed064e29c23ba26b3ec283577af83d955d04110b28556aa080a","ssdeep":"","tlshash":"8e21cad9ff40d833dee1874c05b05201d6c284539a2f266524dfc8a856e72d9fd7db91","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.1085Z","times_seen":2191,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/12.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOFPKjqoQn2ycL8T9YFJEeCf78c9pqLvLTHDeYh3wXjUOTqdw-RzgGEHSgNlaLhFkMtr9HvoNSw\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1762425812223081\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-06-03T16:38:28.814223Z","times_seen":28714,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechat-files.com/api/file/lc/main/14217423/0/ec/11843b59df0c013af585fd6c3d54c6b3.gif","fqdn":"cdn.livechat-files.com","domain":"livechat-files.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:27.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/file/lc/main/14217423/0/ec/11843b59df0c013af585fd6c3d54c6b3.gif HTTP/1.1\r\nHost: cdn.livechat-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 1249684\r\ncontent-type: image/gif\r\ndate: Mon, 10 Nov 2025 08:01:27 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1249684,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 360","md5":"19f31caa60f00d0431af38800ff6ee79","sha1":"412f7f6b123f9be19abfac53884f5fbce1a94b66","sha256":"ed623bf80f7c7ba94bb5241e581786e6fec07d9fdb316921af2924ac4d528989","sha512":"2d6748ad3ed6365bbdb04d181e01a8815fe564a5cb7489a99758f20c2a43c030d367176a275963a542de636e553a39b1ef321da6490268b671b86562fbc6df7e","ssdeep":"24576:dBXoCW7YSX3o0kVLSq1NNDDj9+ftiOy5COluF2sVa2:XoDMe4LdfZ0QOy5Lwc2","tlshash":"4425232b822d9cd57c4160b22409b357391aa1caaef6b92ac760f7c870cd73f55e4772","first_seen":"2025-11-10T08:02:24.837542Z","last_seen":"2025-11-10T08:02:24.837542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":60,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/vendor/animate/animate.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/vendor/animate/animate.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb25-a29b\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 80\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDp1Nmcxw7GNYHmzDgpmeF7QajwWtC1YmkbWGb47peIdI6uL5ha8pGc7a0bgoDmlOo1lR6d296VXEkdmyKsYR0u%2BHgynd2LV2wk%2BdRgx0ahvWqiGzytcsqE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405852db856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41627), with no line terminators","md5":"334a08b5bde1604891f36f67d344f9ba","sha1":"115b9cc3d3042eff4cef5f8d67ca7f0f8de9c21f","sha256":"e5fbca3a78b54f9bf7ef5a205a5d6264b74e8026943ce6523b214d4bacf78761","sha512":"3d928442bd01223442ae50bbd9a1fca1b81a49bcbf56ae17e90dee7017a6489e7ff7b43a124ab5584adcab931cec2e86375a1cfbc57c7b55acedffa2cba4466e","ssdeep":"192:XbcxbwdOslxFG5wQ1oASkND/3fyx5PrYee0nTv:9OqG5wQ1oASkND/3fyx5PrYee0nTv","tlshash":"ba1387aa48e1228554260e55cbcc8fa84b3dc76764b14cdf3396384f8741bae23de767","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-05-03T13:16:01.422046Z","times_seen":1257,"resource_available":false,"data":null}},"time_used":1099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":884,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/owl-carousel/owl.carousel.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/owl.carousel.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-3a44\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EEyLMipHJMFUwdM99aTXmZYQhOlmr8fod7wHM8poVTRAXITGepMQLqNWy8THZgfVWf5SM9n5WO6O70zxn3fd2g9G8O%2FSI8A6j2%2FhnREEx1ZkFdgxcfLvY8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587783156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14916,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14916), with no line terminators","md5":"2fec2de7cc7d2d9a66130311f52b5db8","sha1":"5cfc389925bd8200ee1e0fb224434ded9cae3f15","sha256":"4b18105a346260a3e8359cd02633fd5f8bb244f2d5f43e4375a1efd10e5c865a","sha512":"2c65ad232d52605402fe3c61104ca6e19be96dd89eb072e8554c3019b549c1af260a6fd16ab7c007b4ddc24e9c0bec770aba5cc4d1cff2fb7a9a241699d8a04c","ssdeep":"384:XWxb9XXAhOfMSelTARgzoSC0Z4eAchzD/DM5F:8b9uTARgz5C0ZVDL2","tlshash":"1962183a2152321653b261af157c818213e548023ec7b464f9e6f8edebb6161117bbff","first_seen":"2023-03-07T01:34:34Z","last_seen":"2026-06-03T16:38:17.88082Z","times_seen":3610,"resource_available":true,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/fonts/Muli.ttf","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/fonts/Muli.ttf HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 49008\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:14 GMT\r\netag: \"6466f5b6-bf70\"\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nexpires: Mon, 10 Nov 2025 12:01:24 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7u%2FuZnKwRmaf6qju3c7wPPeXapwO0GXFuqtf9VbUFk%2B8R2YZZjO5GIIa1xlG3Z6LG5wYD%2Fd%2Bk56u3kge7vevW6%2BtTmYOydmmcPtaKltkMK2m8%2ByVJz2apc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c4058f9fe856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49008,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 32 names, Macintosh, Digitized data Copyright (c) 2011-2014, vernon adams.MuliRegularNeWT : Muli : 25-2-2014MuliVersi","md5":"df7330254513d2fa2f4c1e9ee98cc6c6","sha1":"aa2edf77d86fff82790b846917772837828e4902","sha256":"45acbaae00fb0cfa8413b582cd4c0dad9653c78a051a7215205079ccc7c7e233","sha512":"7b105ea2d7f505435519444826958f064ab7d96583f8fa9a963b9285054452599b117957e4015e36125d749fc51863ac55341d04e0317d3d36f2d93e4c6607f9","ssdeep":"768:Lft4a1riuqGu3suyskhzsKxcLgmPPn9tPMZWQKmEcBWzoGHJ/VpwWfgzCjobOSjD:9gSJyvXn9tPMWcsbzft65qe","tlshash":"d3234b02a384060ed5154f7c8aa4a7da67dafe132951cb0b73ccef6cc9521e44a57bce","first_seen":"2023-04-05T18:16:08Z","last_seen":"2026-06-03T16:38:17.972926Z","times_seen":2360,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":766,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjA02vVr6q3NGybFO5WAjje2uKfMcBbWAiJTv5lY2kWMd6X77BXAB_9QXSaqX1mMZP7MuYeFQoUQAton6p8cptDdCE7VLN16fzWUGDu_Qlj5bcKECGxU73LQbgdMjFQXuDqONALyOAO3bsgY9X-BZGFLmciIKXtl2_bc2v7ongG8uiabRaFL1o7Ql8HBQM/s1600/TAIWAN.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjA02vVr6q3NGybFO5WAjje2uKfMcBbWAiJTv5lY2kWMd6X77BXAB_9QXSaqX1mMZP7MuYeFQoUQAton6p8cptDdCE7VLN16fzWUGDu_Qlj5bcKECGxU73LQbgdMjFQXuDqONALyOAO3bsgY9X-BZGFLmciIKXtl2_bc2v7ongG8uiabRaFL1o7Ql8HBQM/s1600/TAIWAN.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vce\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"TAIWAN.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 58087\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"48483dae008b4eeb300442459aee71bd","sha1":"f6d3911ed3b43f3830cb7e853748ba798a29103f","sha256":"c272b14a843f52af60da5899a645de6958dcdc1070f04dd2f9a7dcf1f821012b","sha512":"77f6b156a47ac40e395fb6fb2c30d2c32dfb850fd70c521f70d462d17a0369ab33a3941bacd0e9c3e08ca7840ef5a2793eb95cdf86a96c021e5fdcea41c00c10","ssdeep":"768:R/H5Z0v6KdTmQqszbtCa/OG3dCa0jShykhsiEYitHaf0Bwl3slhQk4NCQF/a3MAk:R0iXkzJtdCfShyDY4HX4VN7ac22","tlshash":"3643021a32d15ab0efc30da9577480787fda9cd2e447f75ca715e1c404afac83994ae4","first_seen":"2025-03-10T18:34:18.279335Z","last_seen":"2025-11-10T08:02:24.842066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":661,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEho6jDyVrspGWCv5NGYmui2szavtm8Ss4bKX15y5c95sfcJjtx2mSOJbWAllvpVJpkgskjRTApEWfrqk_NmBi48d1bw_Q_v8b6bDf1r7ktS-RotPgZLnFUS2Ad4g5mWUT4AJesWRlL1j1gUcTyXdqghIxc_37Ad0WsaqJ49O-g3YsnrlNhml2xv9z9WVWM/s1600/toto-macau5d-2.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEho6jDyVrspGWCv5NGYmui2szavtm8Ss4bKX15y5c95sfcJjtx2mSOJbWAllvpVJpkgskjRTApEWfrqk_NmBi48d1bw_Q_v8b6bDf1r7ktS-RotPgZLnFUS2Ad4g5mWUT4AJesWRlL1j1gUcTyXdqghIxc_37Ad0WsaqJ49O-g3YsnrlNhml2xv9z9WVWM/s1600/toto-macau5d-2.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcf\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"toto-macau5d-2.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 96123\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"0649a4b99322611d1852b7bc39119951","sha1":"3911789389ce5794f3b6aef787d074f442705e78","sha256":"51af703de4ec441c2c957b4d19ba423acd36c175ef4801a76e200db910e8cf55","sha512":"33e56d5d9b35ce75c8c92e4f58d2b309932d7bb88017d1b789f69f5b4edbfb3fe1c7398d78787c1625c3c295920deb6cbf0e65dbc1f0192bfd1ced184a66a6bc","ssdeep":"1536:vFYtNM8i+lySPH1b2zzaSEeI/QTKpQ6yiI5++DoUmgnN2yrk3JuNutFO:9YtNMR+QS/UvtVTR6yzDoJEN2skZ2qFO","tlshash":"2b93122e944ab5751008eed46dc18dbf0048d3a288c95f68ef4ee99e33f78d05a71da7","first_seen":"2025-03-10T18:34:18.304214Z","last_seen":"2025-11-10T08:02:24.842925Z","times_seen":2,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":654,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/cdn-cgi/rum?","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:26.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1195\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000; cf_clearance=1q79WqUg1XNdl1EzIlNYzPrWBI1ArTFkvOq6vGjPmi4-1762761684-1.2.1.1-Tor2hznVbPk3wXjmM0C2f9K32lirIPMBd5avRDjjeqinenanr9U_ZWwfNbsEB9ffcUtkxD5pTOSwwPsrHcVxES_207fOHna0HrCr18zrlNQIEAVdb4qdG8QM82f1IFhPqzsQ3._Sfve5m7u..Iw.ESs00yBzpJGePAe6vxnN.Z4LCrEBCrcVMV.PHJPJZc8XrSZhaMis9TColTKZiPoC8cPmZLDpkEiHsY9kIJVbjaI; laravel_session=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%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KXUF%2BVW6CTUq1U6Upd51pghRtVGnYzRYhEZVMBhEowB4WhFgH3x8YkoGXA9pe8nkOxvK4j9Sg4t7JhpvLjUr9KRD5huKBXlMzis%2BjW7X6wa6R6EDGwWSPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 99c4059e1d8e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-06-03T16:54:50.22839Z","times_seen":18331,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/wlb2c/icons/numbers/dt/tiger.png","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:27.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/wlb2c/icons/numbers/dt/tiger.png HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000; cf_clearance=1q79WqUg1XNdl1EzIlNYzPrWBI1ArTFkvOq6vGjPmi4-1762761684-1.2.1.1-Tor2hznVbPk3wXjmM0C2f9K32lirIPMBd5avRDjjeqinenanr9U_ZWwfNbsEB9ffcUtkxD5pTOSwwPsrHcVxES_207fOHna0HrCr18zrlNQIEAVdb4qdG8QM82f1IFhPqzsQ3._Sfve5m7u..Iw.ESs00yBzpJGePAe6vxnN.Z4LCrEBCrcVMV.PHJPJZc8XrSZhaMis9TColTKZiPoC8cPmZLDpkEiHsY9kIJVbjaI; laravel_session=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%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 23126\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:17 GMT\r\netag: \"674924a5-5a56\"\r\nexpires: Wed, 10 Dec 2025 08:01:02 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\nage: 25\r\nx-cache: HIT\r\nx-cache-hits: 2\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2Wnk5uCz9V6kUndN3DLrk9POJQ49lz0Vy%2B%2B4v9tK3T1mIYBokCSe7W9a6UFwTOaFVUvOBP3Ibj7ifgG9kGuoupZGB5ZPDgcDgg79B9yniwXdXNLS3jvPxI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405a04f9f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"dd226c9877ff17e2023381bd9b2cb26d","sha1":"00200a8d2125468558e2966ec40e35dd19968c6f","sha256":"76bdd8f9035bc0ace7e1e8ba7c7ea9c70bc9ed01e5f6034efb9737301d4ef15c","sha512":"dc059af8919cb122312f878e9903b33fba125d790f4f87d618639e9c0fb3be110b222e2ff34431ebbbb319603163624a303640bc37350dbcec223e45f797c4fb","ssdeep":"384:7RJqO/QvzzplHvRecmRWOdQM9GRszQOOYBcvQX32nY2d12nXoW5qcbjK7CbDMlI1:9JfQDHvwMZMeOjKQX3cYm1oYW53KsMi1","tlshash":"dba2d0d96b9705c998e92d4a2963bb9ccae76350ec451288c43bef90b5f38d50431cf2","first_seen":"2024-08-19T16:17:39.242726Z","last_seen":"2026-06-03T16:38:17.994063Z","times_seen":696,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/bca.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/bca.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1086\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-43e\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orGDWdi26jZldgjyYbrLr7qR0OIX8%2FifDDPLEZvdBqT8ktjZm58H1JcofOjZq3KSabnvyFIjSdMttx9tJvF0Ir1SvaK3rxGrqu1qh3Cg3x61kkP1kFNjM%2B8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405872fca56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 24, 8-bit colormap, non-interlaced","md5":"6acd78d945803ba574275cb83b5e4981","sha1":"e2705a9ac3be32cc594bf8ebe29da30c46cb2013","sha256":"b60a19eb59f86325af0f4c3e4736e6ed7f3ecc1cadd6efe316e90ae7a75f0ce7","sha512":"1432ba4bbaaaea7bfefee8954f73f99d758fb0f02062cfd56d2cdd1b1ab21bd2bfe10604ff8bef8a63efc76f3e90fa17e9e65726178a50544701d7b0739f5423","ssdeep":"","tlshash":"1411b9b4fd87c09fe6701d35d5f79a28c8111c3ce9624997cd7482a7b897c808309195","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.191811Z","times_seen":1833,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Nov 2025 13:01:20 GMT\r\nexpires: Thu, 05 Nov 2026 13:01:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414004\r\nlast-modified: Wed, 14 Jan 2015 22:47:27 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26588, version 1.1","md5":"a84d4b00b169826c4aea77a8611b1e56","sha1":"aeaff41dcc5caac07876a3931c86456aefdbd54c","sha256":"37e9d63421fa7b235c859737c6c65ee2ed95d79e7c49be0fe15903de908c2204","sha512":"38a4e96ead988f3a05efe819a2e146e85d409767b58950b18c6d8ab21c951469925b6ffbcd365536e45b22a8349f17fd4532444ddb4d7b9918dd46f160e1244e","ssdeep":"768:Qpi/npNamCBc356emikPENrOSc09aV5bD6M:kuJC6Jsi4qrOf09arH","tlshash":"5ec2f11679532818f31717f01cabbff2522207ac4cbc2caf50a49451175dbba5bb05ea","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.882071Z","times_seen":2267,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEga_LKTKcLYf0tGRH6LhbocVvEPKUPKRdporF58OFjz1tlODnZ3fnYZDhXFEtVo1r345Q0R29OPprQgFbpThA0TMjZyolSeWGeV_QSEkfGeU80CqW-pFiTgaTL3X9UzqbimpfbF4xnoQMYXqb-DtwM61Gx5Pa7PvMXGq0gG6rFB6uL_vkcNY1qwYkKlCY8/s1600/PHILADELPHIA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEga_LKTKcLYf0tGRH6LhbocVvEPKUPKRdporF58OFjz1tlODnZ3fnYZDhXFEtVo1r345Q0R29OPprQgFbpThA0TMjZyolSeWGeV_QSEkfGeU80CqW-pFiTgaTL3X9UzqbimpfbF4xnoQMYXqb-DtwM61Gx5Pa7PvMXGq0gG6rFB6uL_vkcNY1qwYkKlCY8/s1600/PHILADELPHIA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vca\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"PHILADELPHIA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 66129\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"0a12671317d8198414ae6e3718565efb","sha1":"83acbc047b1f91256e8b1eed4c5997a50b1e9bfa","sha256":"2e60dd657c677f5f1ed88f67cc45e2ac6e9030462b2f7b9c31924cc945edc594","sha512":"8e45b6963d5b176b294f0c94071f037c91bb44dbc348bea6968b3af94066924393fb49582046ae543f240e3b36344c5039c443198534755cd0769b311101ca97","ssdeep":"1536:GX+a9NfkKNcTO1xY9sUTJQtyPCBLl3dfferA9+j5Axg:xa9NtNqex3iQyiLqdlA6","tlshash":"bb5302e7727613f046dc4e880aa38d0cc16e1aca7389c5cee97271362748f9b5b98e55","first_seen":"2025-03-10T18:34:18.354535Z","last_seen":"2025-11-10T08:02:24.846972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":660,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/icon/icon-sydney.jpg","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/icon/icon-sydney.jpg HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4533\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:15 GMT\r\netag: \"674924a3-11b5\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 78\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIhHTBEoCtBF1OpqznNmpab%2B7SyOhRLr0M8I4OFxIm%2B3XWdo0mH90V3Ii6AbOGRlqPJOR2boec3OmoPgM%2FLy7Vog0zz6I4pQJ2AytO%2BWvrTbesbR1gJ0YUM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405870fb756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4533,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 210x205, components 3","md5":"4ae2801024b806bf9c792b648c2069ff","sha1":"5327fd9187084a3cd5665b061be1ad50a88fd6b5","sha256":"e7f471995cff2d274f80d9c96d3d4a066d8731fcea2d52446a93d88bd5e0d878","sha512":"f89eb640e5aaec141e870f04b441462557bd49d6e8d7cd72c607552b1983d9b8ca5eaccb403cf7e4037c7465fe2be0c02ada45b49873d6554b5c6fb488af0d9f","ssdeep":"96:lP+laji/gq5UJGWqiRQux3DlXOb4vCK12ccGMkFs5AaoS:xrircPqdmS4vTkrAaoS","tlshash":"73915c21c3595704d89d43346ca51a6c920c6daf09d9b165375c6ede0c3bbf0ee4f618","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.863307Z","times_seen":1731,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-length: 0\r\ncf-ray: 99c40590a8bd56ba-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/fd468eb09fcf/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=25Yi%2FzJjjGEGe3jbWOQnVSjhfV7%2FYvXc4FpWhZFeeUibeu2rCk7DDNlPt6Qv5XEGLWwx79b5P5bZcCFojOD9q1G2GrPkLrBrDAjB45m6hM6SMxx%2BaveJ1Q3vMr07XAKdXm32MiV6xIas8DaekKg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1214\u0026min_rtt=516\u0026rtt_var=272\u0026sent=970\u0026recv=212\u0026lost=0\u0026retrans=0\u0026sent_bytes=930075\u0026recv_bytes=55372\u0026delivery_rate=32114538\u0026cwnd=93600\u0026unsent_bytes=0\u0026cid=d8a544bd63584766\u0026ts=2030\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10059,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T16:55:47.229708Z","times_seen":16084598,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/style.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/style.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb25-545\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dfVjvJMMpH9QH4nghW%2BfSfjKPZNI%2Bppl0PgMB9LTCJgKq%2FeqOA5VTVhHHzKzPrzzXCt6stEQ7XAJRWRegSFzqDFMPKekxtjnmLzohU4dr68TUSF4FHQ%2BTTY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405854dea56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1349,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1349), with no line terminators","md5":"64ace5290a406bfd18d24f74f84f5dff","sha1":"586128a261e1b1bc3c3e566584d1b48cce07aa19","sha256":"41394d817f909ea1d7d35a3652e3d1a661731ba3380312d55f637cb9b5de7c70","sha512":"dd4a2bb6eb576aeddce2d3e127f9f16b3681657121f52699243fefd83b8194b0423c12be27fe2b23cd4ae6bd2c4fe32f85cc7153bf3b5ae59c1c3cf461eac1a9","ssdeep":"","tlshash":"0b215252f2d2623f2187803498e17abd7762960de3274b3cf01633bc87844c62923b65","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-10T06:46:06.387459Z","times_seen":1261,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/additional.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/additional.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb22-299f\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e96aMwLvLbGlqFbqrKInYX2JhutJ60k%2Bqj9A7DuoR3z%2BySqZHutKAA%2Fc9hQ3nrjTSS4%2FMHkKJQHjnzpT52bQis8t1Fwt1CnFFpte5xM7gVVwZAbunDxQTz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405854ded56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10655,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7696)","md5":"2ff4a977a650b76a8641166f92a7507d","sha1":"3b3e18ea7c29a8acdbdfc3c5b444456f781021e9","sha256":"2b735a9ab21e15a9f70552ac4d1f479b4df7bf5161a07c1bbee610e00798c3f4","sha512":"e5e4602361570a4a6bd76fa611386685d004e8597b4e8f9121f35758bbb9931a4db4641dbf8ac8530d2fd208278dbda7700846c47cf2d3d099a8d1c0b3729d7c","ssdeep":"96:MJn1MOnIYUHsX/dGOeywAjJLX0RcP5VKXsp27lbw0kIoX6pd6j+lY/g4nqqaMTuU:KiuIrLAjJLX0RZD03uBn21","tlshash":"89227c2754eafddf301f83981d3926614b4ac688d7024f6eb36cf3f9749a51d4432a8a","first_seen":"2023-10-17T12:18:33Z","last_seen":"2026-06-03T16:38:17.984371Z","times_seen":1677,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/dana.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/dana.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2233\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-8b9\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BNsij9rf%2Bfp0rYiy1NZKm2QXiMbgpnfpKHM583vtQz31t8MelDukah%2Fs7mNxI6O97GxbyalvoMGWe8w89TcdF8sU0riGtytIo65%2FwzLKv91IciJ4wFf%2BQg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405872fd156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2233,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 25, 8-bit/color RGBA, non-interlaced","md5":"d4c86054bef770accb247693dce1184d","sha1":"215ae0206849177269831f7b9e433794b2ef80ea","sha256":"eb6f10f5452fd08234a524d21df41a6b9be1466c0c3acd39017951cd4122a3cf","sha512":"90e02eecfe4f198e6d5f18e6479781e9be9d3597f2d59ebc91a3659fdca1416db7fefc1daec550b95643809faf33433ba0409903f7c238517898f9905ddf25d3","ssdeep":"","tlshash":"2d410c6ef6816981607d8fd108ce614ace6348c4ca60f4a46cf6dd5f8b216958c188df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.13843Z","times_seen":1833,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/gopay.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/gopay.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4046\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-fce\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHqdXdugQwmt7EyclTFx5gZI0Y%2FuEt%2F%2FuU8vpQbv9q2eRn2LQtm8KpZTt4vw76WDOnfaYobKXTRopScfOyO3V8MhLgL9hI22k7zmjB%2FeHz4WL8HwSOIifhA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405872fd456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit/color RGBA, non-interlaced","md5":"50248070ce64c8360a5576e782f23e68","sha1":"a14710eec9377c1200f0af4f13c2518e0d15fcc8","sha256":"c1e6c3f3fa6029282b8d718f2088fd4dfd5ea272fcb63bc37f95e66df9918df2","sha512":"df620d681efa293af6ada8fe51d4910ee1cb3fed2e7932cf618ef113ce33bd4debec0e4c40cebb7a28481ecc356add8d3acb03103d0575f7074a50c4dae79d8a","ssdeep":"","tlshash":"04814cafbfd17f40569260d208e484931f360dd1ac91e6a2ac95c8de34a19fe1985fc2","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T14:38:23.162857Z","times_seen":1825,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/hanabank.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/hanabank.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 60485\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-ec45\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 8\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2BsNAyTAJMHywxCtrnW24SferDVgDe9coTEV3J5u%2BNe%2BgriiZlwJ0ekfYYiPwoXCDnSD10t4g%2FXUhWQW3n5eGMAgZRd%2BpzHabArEi8idAMCsJuZop0EBgQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405873ff056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 561, 8-bit/color RGBA, non-interlaced","md5":"e4c996980adec7d141e24a7799894329","sha1":"df527934795f75a80a8faf80fa3173b7022b2e73","sha256":"c010d76676e129facad4d1c4b515f4dffa51d75ad7031ba5f15a8ff1b9a1fe03","sha512":"1272751eb6d4fc9450ae8dcb8e69674c65a36cea81d82f98aae21e55547770f8b60f5eb6a073fa2e24b48bef6ecc27fe78dde4a779219ca0893bd9fd4fe75ff3","ssdeep":"1536:+X6S06VixGMkyIzS6sOZeY3sjQUvoyvg6Gt:+XY60JhxOZeCsE4ozNt","tlshash":"7b4302e3ef5fbef5faa404319885e70b7e780ddaa15e56637730f0e4ea07a801658640","first_seen":"2025-03-10T01:18:36.773805Z","last_seen":"2026-05-17T10:22:23.116337Z","times_seen":83,"resource_available":false,"data":null}},"time_used":1057,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":410,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjXaLontHsqlFdW9bPjIdnaC3nN2ZV3z6kxe9MXvG_TEzJasqcEN3RqXFnpq06VsmsGGb4dn_7HWZ-zVVbrviVSmT8fVwtpy4nRMaTQ1f3PMX7aSzOurXAWpq8i-CtL20dot3hur1fMcHTdPC_dBY_6pzvFMNuxidSqikC1c1TpyXXgEd2SfFzbtxCouI/s1600/poker.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgjXaLontHsqlFdW9bPjIdnaC3nN2ZV3z6kxe9MXvG_TEzJasqcEN3RqXFnpq06VsmsGGb4dn_7HWZ-zVVbrviVSmT8fVwtpy4nRMaTQ1f3PMX7aSzOurXAWpq8i-CtL20dot3hur1fMcHTdPC_dBY_6pzvFMNuxidSqikC1c1TpyXXgEd2SfFzbtxCouI/s1600/poker.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51f\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"poker.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 1225755\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1225755,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 269 x 132","md5":"787a7ab1935a585adcd7637288f2b428","sha1":"70a890aeb6183d993d74c41159491473dde35cde","sha256":"1f1654a1c51cb58d1ad3384d5e8f3a4c8cb5ce78c2c452c4e23ba369424fe3c6","sha512":"67a3eb29006269a4d4469e78dde8553eac4210f9d712b8ef5b8b46e5e22e770c10e4ae45e7908932025f1a8bd8f29a8b2805bf243f53ca0aebd03fe09d2ee923","ssdeep":"24576:KQIifeT+5tbvgQtGav3QsorZzlIokW8dV/lQzkX0T:OiWTwtbvgQ3vglrZzfk1dVxX0T","tlshash":"51252309c815cc1da6e26ee008c98bf56cf78bf23a745377d84b6cc0b9d5129a6d6f09","first_seen":"2025-11-10T08:02:24.853549Z","last_seen":"2026-01-06T14:19:09.822645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":393,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf-vbOq9uIs1k23BIP1rEvIxf4omtW3jyofx6KGf2P5SSJJiYgDJ2cbaeuy65gvo-zFiMvh7MhJTM3Pmm90uDaBODtLDQFybTZvTKvY4JdAgrRNo4Jz98ck1FABKH6H2a_ihVlJyRd3EK8kbc9PgaXQVMQlfOAw0VdIoabcDaY-Jc-Lu1VBJQ5NPBQN5w/s1600/promo-rudaltoto.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgf-vbOq9uIs1k23BIP1rEvIxf4omtW3jyofx6KGf2P5SSJJiYgDJ2cbaeuy65gvo-zFiMvh7MhJTM3Pmm90uDaBODtLDQFybTZvTKvY4JdAgrRNo4Jz98ck1FABKH6H2a_ihVlJyRd3EK8kbc9PgaXQVMQlfOAw0VdIoabcDaY-Jc-Lu1VBJQ5NPBQN5w/s1600/promo-rudaltoto.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v8c\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"promo-rudaltoto.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 10487\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 154, 8-bit/color RGBA, non-interlaced","md5":"537f7db93c2a46cef93f47f3f5568c70","sha1":"f899c76f7fc0c99e7e2264a2a6c756a6e4a9e108","sha256":"a8ece9b6f7f2602ae9a01907aeb5f253e68984b4c2a70fcd242a490326d44247","sha512":"bd4b6180aea6bebe57c82acec689b3cbbcc81da8d8e39a8b57c53fa300cc70098dafccd3602b2f5e250ad419d110cc60425796c1d44207362f29f1dba9f4f846","ssdeep":"192:EvdPtW2fwtyDGhtLbAAl0hrPxbO9gf2aEp6ZfIyPbbtAatgjbbCiQscKHKahJL2T:EPXJDG8S0hrPxS02Jp3yPtAwgjbRbqak","tlshash":"3b22cff1c7d5c129a6f3a43e06256626941f3d463dedf12395e43608e4ffa38baa6040","first_seen":"2025-03-10T18:34:18.311656Z","last_seen":"2025-11-10T08:02:24.855633Z","times_seen":2,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg52bJubffACOGEwf2LPwx9oHFlOe6otZh4QHrs2u2x0t4798efFr0O97UPSm6lOUWBhofFCw6hjqy16mW_eosyynb0IUpXhtfYMDbiaJXludBlD7LA1Erv_cKQPwmJPiUOH_AmPzs66T2fET44O8JncPrVBxCh90K5ITdKUXfJeVDKNzH79u431il989k/s16000/buktijp-rudaltoto.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEg52bJubffACOGEwf2LPwx9oHFlOe6otZh4QHrs2u2x0t4798efFr0O97UPSm6lOUWBhofFCw6hjqy16mW_eosyynb0IUpXhtfYMDbiaJXludBlD7LA1Erv_cKQPwmJPiUOH_AmPzs66T2fET44O8JncPrVBxCh90K5ITdKUXfJeVDKNzH79u431il989k/s16000/buktijp-rudaltoto.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v89\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"buktijp-rudaltoto.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 12991\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 154, 8-bit/color RGBA, non-interlaced","md5":"3215552f7a81653b47b2b423b41abd67","sha1":"ce69fd7046b51f1faffb9855fe610c47fe9af1ac","sha256":"8638158ba4f30ffd41b210c5488f013fde529577122572ec432e75070cab5c0f","sha512":"dcf7864a19684fa297ca63087add048a7dc700486b95e9e74e63e13de2d3ca897362691922430575872de319bd47e0fb3126566b48c0a787f697f9348cb78e1a","ssdeep":"192:2gJaIzvfBy4qgfEleNNbI3kq3oWaBFO+JjLqzfXF3hjHJ0WHwxnZiR169WeL92XB:Pas3qnINJI3kq3CO+JjUPJBHV+o605","tlshash":"6a42af89e2fbef61183e7a54ab8510d51d5db2fe192262b0804893ad830e558063eba7","first_seen":"2025-03-10T18:34:18.287861Z","last_seen":"2025-11-10T08:02:24.856661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/css/shio_svg.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /css/shio_svg.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-6b4\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1aIvDEDqMMPILZT1BUxAAgTXm2z4Mm4UTftasKfOG0QzfC9B1u%2Bdq8eHh8YFFNU%2FXr4wQ5xg0gBVwxL0Rm9m8I5zjeOnPcr2JbRfsngg7MNnKyViAmOuKo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853de356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1716), with no line terminators","md5":"c3d8c757360e573efac45bee5ac7712b","sha1":"53d1c35e260b2723e5f127941a53c5631ea1030e","sha256":"c3d46f64e06d98e5d467a140ac28d8fe3f17eeb0b05f6afbf3a4742bfbe48581","sha512":"fb0f16cf4cc8a4a13782edde5d0d695845f73da57b082bc391bdaabbfee6ccdbc37d14a7c99387c94190ff34c683f0d2b73c63c4c0791e67bc10289e3db9c633","ssdeep":"","tlshash":"65311d56c02a83239e062ef274cff281db1397a6374ce3ba0597664573ada047819c76","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-10T06:46:06.349887Z","times_seen":1265,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOH68SCv8Bvm29qw3TUlxQBGUycN-6IUdvYLqH02ZzjUw7ElUN1h7DMk-B0_dyap5N3BRF_K0pc\r\nlast-modified: Thu, 06 Nov 2025 10:43:33 GMT\r\nx-goog-generation: 1762425813076434\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 102075\r\nx-goog-hash: crc32c=jLgQOQ==, md5=s1Y4BKdXtKJCDG8Nq9VYXg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33253\r\ncache-control: public, max-age=28800\r\nexpires: Mon, 10 Nov 2025 16:01:24 GMT\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":102075,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"b3563804a757b4a2420c6f0dabd5585e","sha1":"5c631a212995ed3dfe87408bd094932ed5186ea3","sha256":"1b509b4535710e9d0ab3131a6a4e167adbf25edce520ab00248c35a99e669b23","sha512":"45059b73632300d9cc83f7c1cbd2911c9c3fcb681dfc06fea0ee32cd0dbe89a455a98c315f7c716264d519e3a2ee184d31668f6c2316e5b12fc02466c3830506","ssdeep":"1536:EdWjuJri/36ouUcb4meyLbJX9+rg+Scwp7petAQPlSGSFfq1k:E4juJu/qT4yLbv+r/KLQNV8fR","tlshash":"4ca328d67282b03053f786aba17fa316b2392918340d8420f17cdd6a395adc79177f6e","first_seen":"2025-11-06T11:41:58.504283Z","last_seen":"2025-11-10T08:26:44.534098Z","times_seen":483,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/js/vbulletin_md5.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /js/vbulletin_md5.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-1639\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 1\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQD9JrO6cgF0BTpdentjssnu97zKBnirDQG%2FJzorR5a%2FG1GQk7W5sq2bmeTpb23tm76NsthIB0Q8tD00udDQR%2F0uKwQdRdmnqae31p9Eocs9mSQ0vL19AsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40590185a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2780)","md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-06-03T16:38:17.866867Z","times_seen":2135,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnXm6xh-QPigEZ3OC4LJibdA2_-IFCoxnjSAfcu1WWrW0ftkqehVD2PJUAe6H1hFXGZlQA8vGHJV8ZX3AoOqvvMs_cH5K_TFbf6QycdFqefw1OXnNVwLOqsIn3Lgd-Y6BRALC3A1280ZAV2YAgJMqIPyUn5omsWr8YNh5Ffx2GyK1R9vnB0LDvtQgWRhE/s16000/bigo-1menit.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjnXm6xh-QPigEZ3OC4LJibdA2_-IFCoxnjSAfcu1WWrW0ftkqehVD2PJUAe6H1hFXGZlQA8vGHJV8ZX3AoOqvvMs_cH5K_TFbf6QycdFqefw1OXnNVwLOqsIn3Lgd-Y6BRALC3A1280ZAV2YAgJMqIPyUn5omsWr8YNh5Ffx2GyK1R9vnB0LDvtQgWRhE/s16000/bigo-1menit.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v119\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"bigo-1menit.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 7905\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 207 x 135, 8-bit/color RGBA, non-interlaced","md5":"127d6ce3b519162ebb5c6ffa5451c806","sha1":"635f15bb9fc81df11c4f82de3fe691d550b51599","sha256":"7154c0715e5398dc17be845569046b4b7a870feadb472b6c742fb565a16af033","sha512":"94366f64f90369d0bc0aec8df777d5cad47ca0dc566408c837e88b612aebea4e925c44ec89360f4812b6311b89a917df4d7deecda59983cbecbe193ffa795d84","ssdeep":"192:i/ICHVlVvtjZPl8EUnpMg8R81z/m7cAM3uN9GLWafcZm5:iTHVplWnGSBe7c1aaUZm5","tlshash":"48f19e9f9881f39b1ddfce21836d12812fd074ee3efda58795809b681eb5f1560628d0","first_seen":"2025-03-10T18:34:18.240541Z","last_seen":"2026-03-01T02:55:43.801828Z","times_seen":12,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijjaLuicZRJoG8w9djNdQDm2J6Px0bgmvWEoxcH-2rQzEQn7NpVEUp1DrpiNYKQsE9VHGttdJKXR-IHIYLt10YpFS2r-CY8Crc9jMG84eR7SyTcyQ2rG-qIWvrjbliGgcj7kPkggIKh5RjkJI1_fU3oCmn4XoKiGD6Dy6NXsNzAqLJL0g-7JSUbZWJUTI/s1600/bri-online.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEijjaLuicZRJoG8w9djNdQDm2J6Px0bgmvWEoxcH-2rQzEQn7NpVEUp1DrpiNYKQsE9VHGttdJKXR-IHIYLt10YpFS2r-CY8Crc9jMG84eR7SyTcyQ2rG-qIWvrjbliGgcj7kPkggIKh5RjkJI1_fU3oCmn4XoKiGD6Dy6NXsNzAqLJL0g-7JSUbZWJUTI/s1600/bri-online.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v141\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"bri-online.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 8717\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8717,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 145 x 87","md5":"49f5063cd77b4f560f71cb450385ce53","sha1":"64a226d58fe31b6e3d01e476ef8e039b08545472","sha256":"2ca5aad18403d843639e33439ee77b9418496e1ccf76407b86dc1e4e22b370e8","sha512":"9c030288a4f49cc7049e9fd06b5c06a4650edc804c22b6b5cda8169bb69e27fac06b5f07438d0cff92472b6b0be3097b2c682c5dad698e1e9350a0d2d7ca4432","ssdeep":"192:O7FjZsUss6/mL20zeMtfVAbqEM52+9rF97v+a9:OP+s6wecdAWf2UjbF","tlshash":"9a029f0d7578e010cc9e906408b3376e17ad67e44c752a3275cd8e4fae28aec952aed7","first_seen":"2024-08-19T20:59:40.107948Z","last_seen":"2025-11-10T08:02:24.861431Z","times_seen":4,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.5/customer/action/get_localization?organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026version=ebde210d406eb6fca4bb56ffb070908f_dab1fc69d463ad2fa698150a33c6aee9\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.5/customer/action/get_localization?organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026version=ebde210d406eb6fca4bb56ffb070908f_dab1fc69d463ad2fa698150a33c6aee9\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 5054\r\ncache-control: public, max-age=600\r\nexpires: Mon, 10 Nov 2025 08:11:25 GMT\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14275,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14273), with no line terminators","md5":"9c9a4fa6f89cf5990474cd16fa71df34","sha1":"5151390b287d4f5675e51b3a053ed4e634263832","sha256":"03edb1467ec607d4856f4cf1adab6c6c7754fcdca567955a3b3455d523271473","sha512":"c841daa5ec21a9d60556d4b3527a63fe2d98d6524e670da866c56fb211bf7cbe01b8b90b0def88bdc318e7c01c28e80b7062f0b45acf8e6f5a1fd12f39a28f88","ssdeep":"384:kpODwsgZFZmERb+5DQCBuLdAeAk+8qrJ0L:UxFAjHuJAY++L","tlshash":"0c52f9640eaa79aa0b2753daf5db5d1e38ec33649b401a2fdd984f3042847c1735be39","first_seen":"2025-11-10T08:02:24.864166Z","last_seen":"2025-11-10T08:02:24.864166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/json/fetch/index/data","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:26.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /json/fetch/index/data HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000; cf_clearance=1q79WqUg1XNdl1EzIlNYzPrWBI1ArTFkvOq6vGjPmi4-1762761684-1.2.1.1-Tor2hznVbPk3wXjmM0C2f9K32lirIPMBd5avRDjjeqinenanr9U_ZWwfNbsEB9ffcUtkxD5pTOSwwPsrHcVxES_207fOHna0HrCr18zrlNQIEAVdb4qdG8QM82f1IFhPqzsQ3._Sfve5m7u..Iw.ESs00yBzpJGePAe6vxnN.Z4LCrEBCrcVMV.PHJPJZc8XrSZhaMis9TColTKZiPoC8cPmZLDpkEiHsY9kIJVbjaI; laravel_session=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%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:27 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncache-control: public, s-maxage=900\r\nx-cacheable: 1\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBVFpIKgDrw05%2BRa%2BUEAb3YM8nzqcb5AsN70uTKpv9SS1TSq1v5cykmWzPjxeuWfmrfzJTLediIHwGOjVAysnHXnHnErEcLKQPqCOcosK2BypWLRjBbrRJA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c4059d2c7556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20918,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"62edd892563164a660ee90aee456a424","sha1":"0b787a61785d2ce5681d2b64be597bf93d1a2a1b","sha256":"767a24d593d9af3e589a578ada6bf7d88f3b6508ae4b5db83817765cb8088d22","sha512":"4aa2fd14fc544d74d565f55eaa3407d695a3eecae475e21510d26ecd778f6dd3c3f3520a10d7c6e4ee2c6453572289876347c13934fcf3f80a1d6013172488e5","ssdeep":"384:w+omoKUpx7bvu1bxN06viIT5p9AhlYToxd82nytD/0YZn6jaHpqG1P4C/yXqPqhK:w+omoKUpx7bvu1bxN06viIT5p9AhlYTx","tlshash":"a1926fb96d94297ae50b0eda326a13cf7ab0a821dd5f842462edcf0d8730d106fbd45d","first_seen":"2025-11-10T08:02:24.866416Z","last_seen":"2025-11-10T08:02:24.866416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/img/global/banks/mega.png?v=1762761616","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/img/global/banks/mega.png?v=1762761616 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1428\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 29 Nov 2024 02:19:14 GMT\r\netag: \"674924a2-594\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 7\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQvoUnmL7FtSF%2FsQHRfNI1xoCbxYSV0YBZNqsvrOK41DBn%2BFTxZf9qcYyrPnJI1%2BySkqoVuDtmbamZUnK40nurbT02XO357uj%2Fs9leJCs2rUa9RaNh1qrsc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c405871fbf56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 16, 8-bit/color RGBA, non-interlaced","md5":"dcbad8ef557451173cbd6faadaa7afef","sha1":"4e13be9c556722e99dab5608f4722232e9610b53","sha256":"ee99380c744eda83adbe3c2a771e24cb36a42641448dd0fb3a55433d4e15b824","sha512":"92a2c4c17e4b4244dd06bc97386e2ebe862031e77215263651ca757cf784ebc62152f1aa4e7eb9987283c8ab91dffea6d87248966b7bc9e0322249e76ec00618","ssdeep":"","tlshash":"b621b956d5c03eb7c55cc4726fc60883dd7f9d3aa14bc20a316f15d4554c802d61bf86","first_seen":"2023-06-01T16:10:35Z","last_seen":"2026-06-03T14:21:47.946248Z","times_seen":570,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/owl-carousel/css/owl.carousel.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.carousel.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-48a\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4w0BtJru2HQ8KxO4wpvT%2BLPgW6UgqsH7NfkTp8T3pDpFsO593Be14jwChfQiNpGOTj2QjerXorOZ03XqtvMsyda4zFIIdbJfe%2FqP%2BkvaKbJpJ%2Bt3LqADeS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405853dd956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1162), with no line terminators","md5":"47bd8d7d97301b6bd302b87c4ecb7d14","sha1":"cb31d86b811d053fd3dbf064b7da1e5382d49785","sha256":"6f78df7d3286f40fde31a16161673e4ea46ccc4fd7845eb84f5e9eb4219f235d","sha512":"d27a2d71864ab095cf837d4c64641f4bde1ce193b537843a243622c47bfcef73a4043d2ddc64f3ef3af846e8b9537db6ec6da4b8e4441f237534094ff60e23f2","ssdeep":"","tlshash":"ee214bf41211329d502bc31a57ca6a59193dc622aa22060e532ffe0547c7e1e622fbce","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-05-30T17:32:28.851657Z","times_seen":1157,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSxQYuQFvU3Vlj3Yc2knYo9OsVESt63uPKw3l5Pwb2VQWYjxqZZ5yC2lEwGn56nrBk4UbJcxCKUYYTr8pVw2lOwKx6wCRUTZcQR0kYH9F9pEPbNv5M7YTz0P6Q6dMRKI3EAR6SyxXRamI5UFxQqesA3jy9kyH8R6-0y4t0Hd2Nnn2lD4EE_d2KH6wT8fU/s1600/bacarat.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhSxQYuQFvU3Vlj3Yc2knYo9OsVESt63uPKw3l5Pwb2VQWYjxqZZ5yC2lEwGn56nrBk4UbJcxCKUYYTr8pVw2lOwKx6wCRUTZcQR0kYH9F9pEPbNv5M7YTz0P6Q6dMRKI3EAR6SyxXRamI5UFxQqesA3jy9kyH8R6-0y4t0Hd2Nnn2lD4EE_d2KH6wT8fU/s1600/bacarat.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v51f\"\r\nexpires: Tue, 11 Nov 2025 08:01:25 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"bacarat.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:25 GMT\r\nserver: fife\r\ncontent-length: 1283469\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1283469,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 269 x 132","md5":"48f0bd0fe48f8bda9dcf570d886e80d9","sha1":"26e8eb7956da6c9a5e6b7ddaa62ce25d74e61c94","sha256":"2561362baaad38bc65eb021515b20ae1f57d2e0c093725fc3772b879d43a7cdc","sha512":"aa5cba88d743a91fca613acfed4b4cc0ff9fba3242af1c6c0b12fadf1d0779f46b77ab37992ca1b95157f054e7e860033dcdc7552c7cf32f5a98e33395e791c7","ssdeep":"24576:JM2ihPHd2z61lg9ygqGemQs9FcX4QzyPHka7kzuqMMqkUsv:rc0zwl1VmvbkFhzw2J","tlshash":"fe25236ccf1d47a6a6b03b9c0991bc6c39f1aaa159dd2072e0d9240953ef96fd21f370","first_seen":"2025-11-10T08:02:24.870683Z","last_seen":"2026-01-06T14:19:09.796608Z","times_seen":2,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":391,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjevPiOV2QxH2ITBDUwZ7PmFMvfqBOrBk0x5_RZLZqN7Sx22lDtT8Hugkz9IpuGhqLtwo-P7Wz9t-WzAQZ95Df9Y3r7KTT2VHCnKtowvdkTkWFgzv0yy7Gd3uCToyhhMbqytQ5P_EsuS3eDl5YRk47EueydXJYr0O5OkMyRXgKAE9VAN21LLsL5FFfOG-k/s1600/CANADA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjevPiOV2QxH2ITBDUwZ7PmFMvfqBOrBk0x5_RZLZqN7Sx22lDtT8Hugkz9IpuGhqLtwo-P7Wz9t-WzAQZ95Df9Y3r7KTT2VHCnKtowvdkTkWFgzv0yy7Gd3uCToyhhMbqytQ5P_EsuS3eDl5YRk47EueydXJYr0O5OkMyRXgKAE9VAN21LLsL5FFfOG-k/s1600/CANADA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vc9\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"CANADA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 57080\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57080,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"d395868410afa7a9922cba2da5feb7c2","sha1":"83682640ae6aa18e7eef24ea46b52b3870ab39c6","sha256":"14acf998dc1e4662cfcbd15b68059f0038038d023338606c799fed8027742c8c","sha512":"670ea7b9a1ebbe1af349105c21569483c0f1de2730b2f280e606f35b9cb9dd9691ade4786238a88c0cd76063a3df50b67724448af60e388fc3a2e1261bbbf4f4","ssdeep":"768:nZYbK5DVJflZcgQa4v34inA69MnxszaXoeHJgz4Ut2WbTRZacKan7f2xHhPRwb+Y:nES9Wg4giAs+Ti4mTRkjaoTIxobmVA+j","tlshash":"394302be08deeaf38cfb95500084ba4eba5dd6b137b169815c16c76c33575200bb5da8","first_seen":"2025-03-10T18:34:18.335178Z","last_seen":"2025-11-10T08:02:24.873062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":687,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":631,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiy-cnRuM835fb-NGyPGUbtX6s3lrPIdAsx5yVqyhcGc5O32kARjklOMPAR-zHwF7SkqPVZab9W_5ecTQNdtz5K49pjEkMM4MCnzP_fQeL_oHKiZYarZ9TsoVYQv2Wq-LG3ziFV9T_jQJ9BQefDUfr32hBrClPkTgtP0jqp1e0QQ3XwzTkgH6ssY_FoeXU/s1600/HUAINAN.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiy-cnRuM835fb-NGyPGUbtX6s3lrPIdAsx5yVqyhcGc5O32kARjklOMPAR-zHwF7SkqPVZab9W_5ecTQNdtz5K49pjEkMM4MCnzP_fQeL_oHKiZYarZ9TsoVYQv2Wq-LG3ziFV9T_jQJ9BQefDUfr32hBrClPkTgtP0jqp1e0QQ3XwzTkgH6ssY_FoeXU/s1600/HUAINAN.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcb\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"HUAINAN.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 65608\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"adc247af21e2e8ea89db69f8d5a9682e","sha1":"7c6f99c1de5d1084430196f6f3c858bc66a99cfa","sha256":"9fa441a9bb700a78be0a216c2b06cf6341ca3019efc8a4df81a317e82bba64fd","sha512":"ef6a95989e73c8136380bb0e0c3bd6e71bdfc7e7a6c83fa0fcbddbd6edb2fb9b977fcbb0149ec49027c37170b8689d28fc1680eab3457d7f8b6e97aebe217f96","ssdeep":"1536:rOwbUEatSB2yhrDjFMqW0g4YIcMJyAVRL6Wo7U4J4:9IEaArhrDCqpbhzJjLVo7U4J4","tlshash":"59531257c23b50ef1dcd6b2b59285f2c4d0aa499ee25f8963179c2b5a2f04038f31fa5","first_seen":"2025-03-10T18:34:18.282892Z","last_seen":"2025-11-10T08:02:24.873999Z","times_seen":2,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":659,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.D6G2c1EB.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.D6G2c1EB.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOHyYjpn9SxC5me6qePEJO54orpafcv_PXULwjxUscIyRMJRlqBfO38TItbfnwh0Ch0-dSjlXJUa56DZ0A\r\nx-goog-generation: 1762425812561043\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 403748\r\nx-goog-hash: crc32c=5Tm/pA==, md5=AO328AEIUgPObiZt708tEg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 115152\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":403748,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"00edf6f001085203ce6e266def4f2d12","sha1":"fa4120e97744a4c8223cbd541267a603ba7a7319","sha256":"15580f859ce724072441a3c7e2c76c1bcf490d849c23b3c1dd7f186ba85632fb","sha512":"5169e393f9490760e67de30e5ebb03a73cb684799176c994769ffb242ae598f38e8dbebe0e47e3873872aa8ec1f22efe85a268c6b386686803efef765b8c9aea","ssdeep":"12288:QdevOG8tnGsyxkC8rMQKiHbh6MK1rJWI1OgtuuJoSpXpPK5tf+5qqGFjBee1m9Lg:QdevOG8tG1WIXE1","tlshash":"16847de07342f539d7e3c15b94bb2609f23d3e19b82a9520f1ade8ad33944489277f64","first_seen":"2025-11-06T11:41:58.521536Z","last_seen":"2025-11-10T08:03:20.145271Z","times_seen":417,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/css/vendor/bootstrap-checkbox.min.css","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/css/vendor/bootstrap-checkbox.min.css HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 10 Oct 2023 07:20:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6524fb25-1a50\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNNGicA1bqKolm6M155kzxbKyXF6VL6xsl6h6FO4WmRymckd9GyBm2aR%2FdrpS%2Bn4SMPNUFv30e1osiWDLu53YaOKkNVBxBomM4M%2Bli4KCDzdYxVl8G1FzDI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c405852dbb56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6736,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6736), with no line terminators","md5":"6bdcb8b453b5fe3fc7f82b0c5798ec91","sha1":"bb7bfba0ce22de9dd76d7dd71ea0f99943ca916c","sha256":"bcc36e6dfb15f4c5b87dff41e7f4007cc49b1bd0c460ac5d5e818b4e3a97b2cb","sha512":"c8e90a0b96d0e254dfb19beec791cd2ecb881d41eee114b21657ac87c8b4ad189a8be0e76133ddd427096c004265b4b83eafa869b6fc389f3d2fcd9dc7901d57","ssdeep":"192:VRhigSI/9nYpt597aUCdrWYBaoTT4WK9Rze6:kgSI/9nYptz7ovXf6","tlshash":"74d10f7a9d0a01d9f133c12d62ccab5b51355022d7213fb9fedb35798e964aa2c33788","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-02-27T00:39:20.404594Z","times_seen":1096,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:23.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f5b8-1cfc\"\r\nexpires: Wed, 10 Dec 2025 08:01:23 GMT\r\ncache-control: public, max-age=2592000\r\nage: 79\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1b2o%2FApBRETRNzxoVaZC7jacudtNlmGrp2y2quEpyyNh8CW6vIFLmEMqgLHtRD%2BJ%2BTh%2BQUQyF%2BOx5ShTH4%2FBuGRYLLiXmzALBE%2Fb53iJXCHzu0%2BiG46VNA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99c40587783256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7420), with no line terminators","md5":"a5896459ad6790d1d94eb2180e59e965","sha1":"e5d4b0ef3a929aa6e20ede86b024264a8cf2b473","sha256":"65723a3f6bf46e95bd82bbbc3f986c0df44ad1b4427abbc3fa252a53ff40b4ea","sha512":"de291f580572eacf236b4b7a51824e06cabce1f0544a5e2c7edd60f5cc2716757eee71069a1dccc42037d1704e4433e732469c46b74ea690911010cc6e1f50b4","ssdeep":"96:RwsLo8zljjmeC8CVZfOTfqjf61R9WTE6F67A6f8r6Fk4zzdtMTnO:RwSPNPcfOTfY61zWAAS8r6TBtMTO","tlshash":"57e1420db351525046ef3567211ad334276a86ab8c41e0b6b36cc4d7a7ebf181d33e6d","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-06-03T16:38:17.866237Z","times_seen":2326,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOH68SCv8Bvm29qw3TUlxQBGUycN-6IUdvYLqH02ZzjUw7ElUN1h7DMk-B0_dyap5N3BRF_K0pc\r\nlast-modified: Thu, 06 Nov 2025 10:43:33 GMT\r\nx-goog-generation: 1762425813076434\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 102075\r\nx-goog-hash: crc32c=jLgQOQ==, md5=s1Y4BKdXtKJCDG8Nq9VYXg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33253\r\ncache-control: public, max-age=28800\r\nexpires: Mon, 10 Nov 2025 16:01:24 GMT\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":102075,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"b3563804a757b4a2420c6f0dabd5585e","sha1":"5c631a212995ed3dfe87408bd094932ed5186ea3","sha256":"1b509b4535710e9d0ab3131a6a4e167adbf25edce520ab00248c35a99e669b23","sha512":"45059b73632300d9cc83f7c1cbd2911c9c3fcb681dfc06fea0ee32cd0dbe89a455a98c315f7c716264d519e3a2ee184d31668f6c2316e5b12fc02466c3830506","ssdeep":"1536:EdWjuJri/36ouUcb4meyLbJX9+rg+Scwp7petAQPlSGSFfq1k:E4juJu/qT4yLbv+r/KLQNV8fR","tlshash":"4ca328d67282b03053f786aba17fa316b2392918340d8420f17cdd6a395adc79177f6e","first_seen":"2025-11-06T11:41:58.504283Z","last_seen":"2025-11-10T08:26:44.534098Z","times_seen":483,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":69,"dns":45,"connect":7,"send":0,"wait":17,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a2d1jp7lg.rudaltoto289.com/assets/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"5a2d1jp7lg.rudaltoto289.com","domain":"rudaltoto289.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rudaltoto289.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 12:46:45 GMT","end":"Fri, 09 Jan 2026 13:45:31 GMT"},"fingerprint":{"sha1":"E4:49:7E:26:20:C5:08:E2:44:41:B1:09:95:15:C9:AE:70:B5:0D:6C","sha256":"0F:27:DF:0E:59:88:81:C5:97:01:79:96:E4:51:19:CE:4D:9D:02:94:FE:F3:3E:8C:DC:EA:0E:F0:BB:E7:F5:55"}}},"request":{"raw":"GET /assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: 5a2d1jp7lg.rudaltoto289.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/assets/css/font-awesome.min.css\r\nCookie: __cflb=02DiuJJPPyxhnDbWwdBQfXY8izD7Q6FYXC32wVGbueWXW; __cf_bm=GkW.rx7qDLFi9Rezgz1oS6JyqcmaCqgFybthIdCDiQU-1762761682-1.0.1.1-yZOlch28RwG0YMCgbO9_3qOnfA6tngDgEJEbIeQKIaFtrAL58NVq4rJPiPEkao86WKp1K1INBd20HQOT56dJ0QORIzWLSENqq6ODq5O4UTE; _cfuvid=0Ix66skuRP0Ke8KqQl2JkZKNAS3EC1wo7Y_vIAgD_s0-1762761682465-0.0.1.1-604800000\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 10 Nov 2025 08:01:24 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77160\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 19 May 2023 04:06:14 GMT\r\netag: \"6466f5b6-12d68\"\r\nx-cache: MISS\r\nx-cache-hits: 0\r\ncf-cache-status: MISS\r\nexpires: Mon, 10 Nov 2025 12:01:24 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXye%2FNOy6WVO7kaTqpfhp7PUq2keiScvB9P98qHEcbbHfUIoRPFFOVtcvz6Z2etMWujjKwxLtQj%2BQu8J7AWZUvi5bYlJzfBisyIpNQxYDS4GKE6RYiKXOck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99c4058e1ea956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-03T16:55:00.805148Z","times_seen":488102,"resource_available":true,"data":null}},"time_used":1090,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":687,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.Diq_podX.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.Diq_podX.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOHLzmpzZWhwuMWNQ89a1Ztu1gqI8T2ZRRTpUkSjTIwYy5pNhfVpXS2eLlkvInYe46-QfiVUpMD1RZUuAg\r\nx-goog-generation: 1762425812832950\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 17078\r\nx-goog-hash: crc32c=7lNCCw==, md5=UeexYHm7+yZKY9McibknlQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 5365\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":17078,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17077)","md5":"51e7b16079bbfb264a63d31c89b92795","sha1":"d75d04d4f31a79ece0b7b0943a6d832722ad7870","sha256":"0e72b8f5f64f9310d68ff5486ae26eeba74e9b5fc399c71aa4d01900dbd92cfd","sha512":"21c1647affbf7cb9ace4027cec796d1ae70400048552f901292b25f4e640f17380ee62494f8204c490610e4982923ddc7b08a5ae800dc31c3f1e265828d98966","ssdeep":"384:KU5urbvY+4nmoHDpXlEmHx9pvV4xkT3pTnxSHI0WrD/j7PFHyJ:PurbvY9JpXlhHxrvV4+3pLxSovrD1HyJ","tlshash":"5c72c8c5f7aed93e53e7a4d17c682003fa785a84f02c91b4f3984d66719e884c173b26","first_seen":"2025-11-06T11:41:58.463996Z","last_seen":"2025-11-10T08:03:20.161649Z","times_seen":411,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/animate.css@4.1.1/animate.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:22.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/animate.css@4.1.1/animate.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.1.1\r\nx-jsd-version-type: version\r\netag: W/\"11846-uB7xsi3iavinpGVvVl+8kaaddRg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 10 Nov 2025 08:01:23 GMT\r\nage: 3232017\r\nx-served-by: cache-fra-etou8220089-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 5352\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71750,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-06-03T17:12:42.650053Z","times_seen":29687,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":98,"dns":1,"connect":27,"send":0,"wait":26,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:24.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://5a2d1jp7lg.rudaltoto289.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Nov 2025 13:01:20 GMT\r\nexpires: Thu, 05 Nov 2026 13:01:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 414004\r\nlast-modified: Wed, 14 Jan 2015 22:47:27 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26588, version 1.1","md5":"a84d4b00b169826c4aea77a8611b1e56","sha1":"aeaff41dcc5caac07876a3931c86456aefdbd54c","sha256":"37e9d63421fa7b235c859737c6c65ee2ed95d79e7c49be0fe15903de908c2204","sha512":"38a4e96ead988f3a05efe819a2e146e85d409767b58950b18c6d8ab21c951469925b6ffbcd365536e45b22a8349f17fd4532444ddb4d7b9918dd46f160e1244e","ssdeep":"768:Qpi/npNamCBc356emikPENrOSc09aV5bD6M:kuJC6Jsi4qrOf09arH","tlshash":"5ec2f11679532818f31717f01cabbff2522207ac4cbc2caf50a49451175dbba5bb05ea","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-06-03T16:38:17.882071Z","times_seen":2267,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":194,"dns":2,"connect":26,"send":0,"wait":10,"receive":2,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.DnPj2T1w.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.DnPj2T1w.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOE0KtPVCcaq3TnsiN6SxTx19IbwkgI7b_U7IAwJcMdWm34sblhBsT7QSfWYqbpPAzB4\r\nx-goog-generation: 1762425812219130\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 74932\r\nx-goog-hash: crc32c=bxGiCg==, md5=ipJDYHDwSa3JyTrzAMfKIA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 23580\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":74932,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8a92436070f049adc9c93af300c7ca20","sha1":"9eca9f6ed0780527935203e6d44d8d92feed7250","sha256":"dffbe0125d106fc480ff0241372de6006ea167475dd1765976d191021b45c6df","sha512":"7ac1e3ca1d9f619eb3f1a522e1ac46f08fa08d22f3e9ec4ce60f1f9c46d491a34581830087a3c0df7e5cbb1eca72cc77ae6a78db3018a286ed583139f59060f5","ssdeep":"1536:a7aVViMxWrbhebl9Y3dvHJHqJeHPYT9qYzPV/FcGb3aC:aLM0rbI+xHqJeHPYZnzcGb3aC","tlshash":"7c731ad5f296f1398bd794e511795043fa2a3a29b81c8170f36cce20215e6c2717bfab","first_seen":"2025-11-06T11:41:58.469118Z","last_seen":"2025-11-10T08:03:20.086734Z","times_seen":411,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.CNndOvBo.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14217423\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=a77d2f71-51a7-4a24-b254-186f74e42048\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-11-10T08:01:26.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.CNndOvBo.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AOCedOF2tAY4tTT5c5fFPnxCjgAD5dn8C3CCqp284zyfR_2AUODAWtMFI24qK_MQWc78EZihIwgTOHI5_EU0xw\r\nx-goog-generation: 1762425812826544\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 193807\r\nx-goog-hash: crc32c=+LmSDA==, md5=Fm3kupPTymALxdEfZTzOCA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 60909\r\nlast-modified: Thu, 06 Nov 2025 10:43:32 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 10 Nov 2026 08:01:26 GMT\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":193807,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"166de4ba93d3ca600bc5d11f653cce08","sha1":"11cccb520d2c76aeff7083833cd17c44f5599c86","sha256":"c33f2e09e49ffe45ca9a394242988b8bb2ffb7c4cf0545e4f5501044600c8bdf","sha512":"4fa0b000e2f5588454888ff9416462534ef3510cab63dc32fd62e276928c73379e50ed5aa8a77fa398f5b95c5075dcdaee943aaf98bcddc3085b7bb209da50da","ssdeep":"3072:jeztTAWUNvLdCRS/3FIQmF57CgvVmgjfpbJzS3Mb27:ahPUNvBiSs1vVzjfpblSH","tlshash":"5a146cc4b186f53987e724e6487f1102f23d6d19784cc424fa99eeb63da418a9273f2d","first_seen":"2025-11-06T11:41:58.471065Z","last_seen":"2025-11-10T08:03:20.120801Z","times_seen":417,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDDAkFZblUuqZBdn_yeMYB-Fd4P1RV4Hsg5Mk2JULCaWGNkVBOORjza1v7qUsL-9v-sB0lpqys-jdmdiNbCWCMPx9f3hA7OmiKZEOlAs3SeJEFvdUnjFoFQ0iC9aMNJgHqFB0WeLFJFL51aRLu3TGrFJPyF_dFP8KLb1DMbTkoVf7whI07VQNEdaeiQu0/s1600/gopay-online.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgDDAkFZblUuqZBdn_yeMYB-Fd4P1RV4Hsg5Mk2JULCaWGNkVBOORjza1v7qUsL-9v-sB0lpqys-jdmdiNbCWCMPx9f3hA7OmiKZEOlAs3SeJEFvdUnjFoFQ0iC9aMNJgHqFB0WeLFJFL51aRLu3TGrFJPyF_dFP8KLb1DMbTkoVf7whI07VQNEdaeiQu0/s1600/gopay-online.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v140\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"gopay-online.gif\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 8538\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8538,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 145 x 87","md5":"0b3896ea2340c7ab89940834b23a9ece","sha1":"cae4b8b3dd202b0549261a2893ae2af636884078","sha256":"88cf5ca4195f794d4be9d57aeadc7ef40f7f62a27206251b4bcd7d9ac694c9b5","sha512":"78c9c7c341b62d4add50614c9538ec6e1205e31ddeef6ba58dd3b55e0d0dfe190b500fc05ae7c58553a822156fd3985cc400f2be6761601e42dc28f4688a5cdd","ssdeep":"192:C7FlhS8Ifwg3GhlhKUsd+ShfnX9sIPQiTxxmmxSO65ed7+tudMV:C748I4g8lhCjYiTx2v47Egw","tlshash":"f402bf5de851a7d04de1fa07840d8fed98619de2fa70dc5fe095182148888f6a0913fa","first_seen":"2024-08-19T20:59:40.103024Z","last_seen":"2025-11-10T08:02:24.885726Z","times_seen":4,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHf2F3Jf_bt23ZnrsjnpZWVsfk56wdcjvDQa_svVyUw325Ff6Zkk-rqcatz9FwU88FEYlFRvAXbCTOORbfWFC1O2i7eqOhMqkjdDP1RmPM1G9maPZ-Su_jlMXsXbokYSiJJ3rG2EAWbUHCCPNOYLvhswwDi-3zpb3aCxoB9Sza0S3nZcdp5uGECPCJay4/s1600/OKINAWA.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5a2d1jp7lg.rudaltoto289.com/","date":"2025-11-10T08:01:25.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:45 GMT","end":"Mon, 05 Jan 2026 08:38:44 GMT"},"fingerprint":{"sha1":"BF:DD:06:00:E0:E8:17:69:DC:2B:A1:04:6E:7D:D2:CC:F2:F1:3C:65","sha256":"39:66:3E:DC:C6:9D:D6:FD:9E:62:46:8B:14:F9:F2:FD:70:E8:B1:C0:2B:C6:45:C3:3A:86:DE:D3:E3:30:1E:DE"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjHf2F3Jf_bt23ZnrsjnpZWVsfk56wdcjvDQa_svVyUw325Ff6Zkk-rqcatz9FwU88FEYlFRvAXbCTOORbfWFC1O2i7eqOhMqkjdDP1RmPM1G9maPZ-Su_jlMXsXbokYSiJJ3rG2EAWbUHCCPNOYLvhswwDi-3zpb3aCxoB9Sza0S3nZcdp5uGECPCJay4/s1600/OKINAWA.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5a2d1jp7lg.rudaltoto289.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vcc\"\r\nexpires: Tue, 11 Nov 2025 08:01:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"OKINAWA.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 10 Nov 2025 08:01:26 GMT\r\nserver: fife\r\ncontent-length: 49144\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49144,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"e489b1103767b846dce6962a51dd821e","sha1":"6287c1057e83524f3f45f9a68e3c6baa69fb00ed","sha256":"f3104ff06365975bc012941093e7fe86d5c7ea03989de2165878530c862d78f8","sha512":"d9da527597ab4c8e83f5b00f8a2c9c269b1f780080dd9606088486915dbc9ad019f1ee7132a69bb51321a0f4fd642f68a71e5cd6b067174e5cebc91d7c89f799","ssdeep":"768:mkZH4/+YtrIsc673iOhRW4lv9+XVHCucBYUpzh70hRLueQ1Cn28SNS+Ywo08HI3e:tZmJIsc673iOhQq+FSlALu9Yn28ySr2K","tlshash":"e7230201c6c9e565e8d2d7c2ba2b3e4747390bf1093bd11cb728399c125cc96a2f3725","first_seen":"2025-03-10T18:34:18.350436Z","last_seen":"2025-11-10T08:02:24.88644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":666,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}