{"report_id":"c057d6e1-6163-4da6-99d5-95cf107027a9","version":0,"status":"done","tags":[],"date":"2026-08-13T18:56:43Z","url":{"schema":"http","addr":"rfrain.com/wpadmin/dio/adv","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":0,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"rfrain.com/wpadmin/dio/adv/","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"title":"RFP Invitation","dom":{"size":39451,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5917)","md5":"535d1b665ab42ecfe2ace0e4fca62b4c","sha1":"1b99d5743013803277e3b5b253f39bffe2131800","sha256":"411fc95f69deaac021c8c67eb746d326e1940a46f546649f9a7d803b9745f13e","sha512":"511d9c636ba1af0deec1e62b7a744ec98a710f5aa1394b1c94f073fabf9f1ee9de568f8d3dfd4e401b1844b9d9096b42cf5bd91b82cac851e02121a04386a0bc","ssdeep":"384:zC/uOwORSrIGU/k9ogUSiim3ru45XbjgS2k:zC/uOwORCU/mUSLm3qigS2k","tlshash":"d303f89f19775025a917557b27ef274a32249003d90bcc187edd6388cfc5298a8f2bee","dom_hash":"domhashede6e1032b11179fc6d3bd9afc761cfb","first_seen":"2026-08-13T18:56:52.099613Z","last_seen":"2026-08-13T18:56:52.099613Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rfrain.com/wpadmin/dio/adv","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":0,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T18:56:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":4,"received_data":196272,"sent_data":2204,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rfrain.com","ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"2014-03-08","domain_rank":4508118,"first_seen":"2026-08-13T08:22:24.575131Z","last_seen":"2026-08-13T08:22:24.575131Z","alert_count":0,"request_count":7,"received_data":10293279,"sent_data":3655,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"1c58ea12e6a51441253f3066b3110f5c","sha1":"6d9a699c95ad01195f3457c4160ddaac00014057","sha256":"a1433aac7e2f0d2b9c448c4999a386e053331ed15199e0eb8f9b8b9c3e4ecbf3","sha512":"ddfd03cc257b68e879d2856cec3f9328773b4be1ac8074ce7b57930768a8bc4bfc0636e3c6f74cedb2aeb57eac6718651070882e05ba20b6281453f2c76a1fd3","magic":"Composite Document File V2 Document, Can't read SAT","size":10227712,"url":{"schema":"https","addr":"rfrain.com/wpadmin/dio/adv/ScreenConnect.ClientSetup.msi","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rfrain.com/wpadmin/dio/adv/","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ccc302ce2cd1062c9c0b94ac9792113","sha1":"f8dd8a647913ad9f744e947ef6c476fa95cd1e88","sha256":"9c7e40260d8d8df75acc8e3314fca8cdc98fb04d99c0b8a8ce2504cbbea965bb","sha512":"f0e7987cb6a5b3ba03d7d8ad6a2f627110d5c36257ac5eb6e36d9fd6b18abbe1c36ed1b981c3ba9172eb108e689bec95dd424ef83914af54a7d348dd30ada679","ssdeep":"96:t2DFEAy0yhZwZ0k4+Lw/QoE5RfyekPQzIOO/qUO0Ri95ElqJezqA31xuA6LFty2J:k7LGQoE5LkYstSiixeH3ruKJ5XkM0GGl","tlshash":"a922002f35bb9436476f21ba57df650a372210031a48cd443e7c4749bfa19b4a4b2aeb","size":10417,"data":"","first_seen":"2026-08-13T18:56:52.109069Z","last_seen":"2026-08-13T18:56:52.109069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Report error:NetworkError when attempting to fetch resource.","filename":"https://rfrain.com/wpadmin/dio/adv/","line_number":894,"column_number":25},{"level":"error","text":"Report error:NetworkError when attempting to fetch resource.","filename":"https://rfrain.com/wpadmin/dio/adv/","line_number":894,"column_number":25}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rfrain.com/wpadmin/dio/adv/","date":"2026-08-13T18:56:14.030Z","timestamp":1786647374030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rfrain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rfrain.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:36:57 GMT\r\nexpires: Fri, 13 Aug 2027 07:36:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40757\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48256,"size_decoded":49068,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-13T21:35:16.446689Z","times_seen":26572,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":19,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rfrain.com/wp-content/uploads/2023/11/MicrosoftTeams-image.png","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rfrain.com/wpadmin/dio/adv/","date":"2026-08-13T18:56:14.685Z","timestamp":1786647374685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rfrain.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Jul 2026 15:03:47 GMT","end":"Mon, 26 Oct 2026 15:03:47 GMT"},"fingerprint":{"sha1":"20:6B:9D:F9:B1:FE:99:51:CA:8A:D6:E2:91:35:B2:6E:54:F3:0F:86","sha256":"14:A9:CA:80:A5:41:3F:65:AC:BE:27:72:AD:76:29:27:1E:4B:FD:EE:93:A7:DD:40:B6:0A:30:92:F4:06:D6:17"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/MicrosoftTeams-image.png HTTP/1.1\r\nHost: rfrain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rfrain.com/wpadmin/dio/adv/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 19 Feb 2024 08:36:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3162\r\ncache-control: max-age=31536000\r\nexpires: Fri, 13 Aug 2027 18:56:14 GMT\r\nvary: Accept\r\ncontent-type: image/png\r\ndate: Thu, 13 Aug 2026 18:56:14 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3162,"size_decoded":3452,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGBA, non-interlaced","md5":"472e4ff599eef59d43bc60b5fb891f65","sha1":"73c56d8207841b7b726dec047cf274599c601c1e","sha256":"1474da45cdc33e7da5b8e394886a424b903e50a3fbe04c0055d494dd5adccf8a","sha512":"db2589d7eb78620159d7ae201899bcf356dfb30443e345b14ec18fe2bd51be3c5e81aa4773d0909b72cb4fa5159ae6180640d21d7362cae2394ac3a1261edeba","ssdeep":"","tlshash":"8d513c7b12869a1c4a855b1761d4b46ccdbeed641d540c3bf8e68a75cf0124c8acda33","first_seen":"2026-08-13T17:57:33.420411Z","last_seen":"2026-08-13T18:56:52.103133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rfrain.com/wpadmin/dio/adv","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:56:12.453Z","timestamp":1786647372453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rfrain.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Jul 2026 15:03:47 GMT","end":"Mon, 26 Oct 2026 15:03:47 GMT"},"fingerprint":{"sha1":"20:6B:9D:F9:B1:FE:99:51:CA:8A:D6:E2:91:35:B2:6E:54:F3:0F:86","sha256":"14:A9:CA:80:A5:41:3F:65:AC:BE:27:72:AD:76:29:27:1E:4B:FD:EE:93:A7:DD:40:B6:0A:30:92:F4:06:D6:17"}}},"request":{"raw":"GET /wpadmin/dio/adv HTTP/1.1\r\nHost: rfrain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nlocation: https://rfrain.com/wpadmin/dio/adv/\r\ncontent-length: 283\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Thu, 13 Aug 2026 18:56:13 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":43,"connect":153,"send":0,"wait":162,"receive":0,"ssl":461},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rfrain.com/wpadmin/dio/adv/","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:56:13.280Z","timestamp":1786647373280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rfrain.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Jul 2026 15:03:47 GMT","end":"Mon, 26 Oct 2026 15:03:47 GMT"},"fingerprint":{"sha1":"20:6B:9D:F9:B1:FE:99:51:CA:8A:D6:E2:91:35:B2:6E:54:F3:0F:86","sha256":"14:A9:CA:80:A5:41:3F:65:AC:BE:27:72:AD:76:29:27:1E:4B:FD:EE:93:A7:DD:40:B6:0A:30:92:F4:06:D6:17"}}},"request":{"raw":"GET /wpadmin/dio/adv/ HTTP/1.1\r\nHost: rfrain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nlast-modified: Tue, 28 Jul 2026 22:47:09 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 9539\r\ncontent-type: text/html\r\ndate: Thu, 13 Aug 2026 18:56:13 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39587,"size_decoded":9909,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5917)","md5":"f44a0cbe0ecf28c56ad23105419bef3d","sha1":"3cad458420aa2f68b94cbfe482ed5578976a42ad","sha256":"ca03a3411276dff08de388669b6a89ed50b46897155740b1e86827ae2cee4514","sha512":"62abce6d673b97913b12fb129bc275909095fed0c761e449597899fbd346fb532edc5e168d253a1f74ec3a3e1c7f58cd50bb43a34136669b86196e7c3357eace","ssdeep":"384:DC/uOwORSrIGU/k9ogUSiim3ru45Xbj6StjM:DC/uOwORCU/mUSLm3qi6St4","tlshash":"3a03e89f19775025a917557b27ef274a33249003d90bcc187edd6388cf85298a8f2bee","first_seen":"2026-08-13T18:56:52.105375Z","last_seen":"2026-08-13T18:56:52.105375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rfrain.com/wpadmin/dio/adv/assets/css2","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rfrain.com/wpadmin/dio/adv/","date":"2026-08-13T18:56:13.628Z","timestamp":1786647373628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rfrain.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Jul 2026 15:03:47 GMT","end":"Mon, 26 Oct 2026 15:03:47 GMT"},"fingerprint":{"sha1":"20:6B:9D:F9:B1:FE:99:51:CA:8A:D6:E2:91:35:B2:6E:54:F3:0F:86","sha256":"14:A9:CA:80:A5:41:3F:65:AC:BE:27:72:AD:76:29:27:1E:4B:FD:EE:93:A7:DD:40:B6:0A:30:92:F4:06:D6:17"}}},"request":{"raw":"GET /wpadmin/dio/adv/assets/css2 HTTP/1.1\r\nHost: rfrain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rfrain.com/wpadmin/dio/adv/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nlast-modified: Mon, 27 Jul 2026 15:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12355\r\ndate: Thu, 13 Aug 2026 18:56:13 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12355,"size_decoded":12654,"mime_type":"text/css","magic":"ASCII text","md5":"7221de80ed10c152c8235a240aa8882d","sha1":"97fb9bffee901e5fb904215fb442d2837755bd61","sha256":"ccb4927c1e665717c1f91e480fbbad168db8c70373b7ccf7abf2f70131c04de3","sha512":"1a36bf08287fee75b1a2f9f6992c9c092c855ca69e912928e1e003039e2f9af250ec28b7a0d8e7b4bf002e13bff4845c4c59232bd7cf82056e2b2f5b0c5d19bb","ssdeep":"192:9NNsR234qhDxNOzi23/Zh8YNr2/23ighlfNEV423RHhGONxQt23kGhHu:rLtonFdyDHk","tlshash":"b942aa92042b9500ab471dc223cf7f366ece10896086d1bd6ffd1cca9cead66436874e","first_seen":"2025-09-21T12:20:23.63913Z","last_seen":"2026-08-13T21:35:16.449245Z","times_seen":148,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rfrain.com/wpadmin/dio/adv/","date":"2026-08-13T18:56:14.019Z","timestamp":1786647374019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rfrain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rfrain.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:36:57 GMT\r\nexpires: Fri, 13 Aug 2027 07:36:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40757\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48256,"size_decoded":49068,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-13T21:35:16.446689Z","times_seen":26572,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":17,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rfrain.com/favicon.ico","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rfrain.com/wpadmin/dio/adv/","date":"2026-08-13T18:56:14.131Z","timestamp":1786647374131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rfrain.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Jul 2026 15:03:47 GMT","end":"Mon, 26 Oct 2026 15:03:47 GMT"},"fingerprint":{"sha1":"20:6B:9D:F9:B1:FE:99:51:CA:8A:D6:E2:91:35:B2:6E:54:F3:0F:86","sha256":"14:A9:CA:80:A5:41:3F:65:AC:BE:27:72:AD:76:29:27:1E:4B:FD:EE:93:A7:DD:40:B6:0A:30:92:F4:06:D6:17"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rfrain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rfrain.com/wpadmin/dio/adv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nx-powered-by: PHP/7.4.33\r\nlink: \u003chttps://rfrain.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://rfrain.com/wp-content/uploads/2023/11/MicrosoftTeams-image.png\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 13 Aug 2026 18:56:14 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rfrain.com/wpadmin/dio/adv/ScreenConnect.ClientSetup.msi","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:56:16.828Z","timestamp":1786647376828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rfrain.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Jul 2026 15:03:47 GMT","end":"Mon, 26 Oct 2026 15:03:47 GMT"},"fingerprint":{"sha1":"20:6B:9D:F9:B1:FE:99:51:CA:8A:D6:E2:91:35:B2:6E:54:F3:0F:86","sha256":"14:A9:CA:80:A5:41:3F:65:AC:BE:27:72:AD:76:29:27:1E:4B:FD:EE:93:A7:DD:40:B6:0A:30:92:F4:06:D6:17"}}},"request":{"raw":"GET /wpadmin/dio/adv/ScreenConnect.ClientSetup.msi HTTP/1.1\r\nHost: rfrain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rfrain.com/wpadmin/dio/adv/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nlast-modified: Tue, 28 Jul 2026 22:46:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10227712\r\ncontent-type: application/x-msdownload\r\ndate: Thu, 13 Aug 2026 18:56:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10227712,"size_decoded":342,"mime_type":"application/x-msdownload","magic":"Composite Document File V2 Document, Can't read SAT","md5":"1c58ea12e6a51441253f3066b3110f5c","sha1":"6d9a699c95ad01195f3457c4160ddaac00014057","sha256":"a1433aac7e2f0d2b9c448c4999a386e053331ed15199e0eb8f9b8b9c3e4ecbf3","sha512":"ddfd03cc257b68e879d2856cec3f9328773b4be1ac8074ce7b57930768a8bc4bfc0636e3c6f74cedb2aeb57eac6718651070882e05ba20b6281453f2c76a1fd3","ssdeep":"24576:GEZbBq1X+Br8dmVqrIcZbWdlK86lBToEGmQzWDoHBrHrm/LQAoyBVgUZbQb:Giq1XE8diqccZbgcTBTofqDok/LQAo4G","tlshash":"8025236ff844dc5bd4128b7708c847997b265f808b6089033486fdced37259a26caf8e","first_seen":"2026-08-13T18:56:52.107302Z","last_seen":"2026-08-13T18:56:52.107302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1754,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":1590,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rfrain.com/wpadmin/dio/adv/assets/bluemountain-logo.png","fqdn":"rfrain.com","domain":"rfrain.com","tld":"com"},"ip":{"addr":"132.148.44.24","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rfrain.com/wpadmin/dio/adv/","date":"2026-08-13T18:56:13.632Z","timestamp":1786647373632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rfrain.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 28 Jul 2026 15:03:47 GMT","end":"Mon, 26 Oct 2026 15:03:47 GMT"},"fingerprint":{"sha1":"20:6B:9D:F9:B1:FE:99:51:CA:8A:D6:E2:91:35:B2:6E:54:F3:0F:86","sha256":"14:A9:CA:80:A5:41:3F:65:AC:BE:27:72:AD:76:29:27:1E:4B:FD:EE:93:A7:DD:40:B6:0A:30:92:F4:06:D6:17"}}},"request":{"raw":"GET /wpadmin/dio/adv/assets/bluemountain-logo.png HTTP/1.1\r\nHost: rfrain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rfrain.com/wpadmin/dio/adv/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 86400\r\nlast-modified: Mon, 27 Jul 2026 15:22:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8087\r\ncache-control: max-age=31536000\r\nexpires: Fri, 13 Aug 2027 18:56:13 GMT\r\nvary: Accept\r\ncontent-type: image/png\r\ndate: Thu, 13 Aug 2026 18:56:13 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8087,"size_decoded":8497,"mime_type":"image/png","magic":"PNG image data, 738 x 210, 8-bit colormap, non-interlaced","md5":"18bd413f4f00bb6e46c8a70e2568d946","sha1":"f88520431e49feed3fc7992ce0c31e88475631b2","sha256":"54ac78a0c4dabb203ba93c0200958229b5bd7fb5aae04c5d0f1700c33448bec4","sha512":"72f799b69810963fc26bd1e7fa16751f0324de0602a777fed1b1015d7314c1e54717579fbd63e4dea4de0582531846e860b008f39868322a8c4884e73ce59d6a","ssdeep":"192:/oxIm2KOFT17YSr03rbJSStXxs+bXtxCnczl:gPI7BIrbJ75hH02l","tlshash":"3ef1bee6c03366cfd0f27016802c1b4b0f08ae752545e9ce4ac86b69695eba37bd0c4e","first_seen":"2026-08-06T16:03:59.261825Z","last_seen":"2026-08-13T18:56:52.108454Z","times_seen":4,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rfrain.com/wpadmin/dio/adv/","date":"2026-08-13T18:56:14.023Z","timestamp":1786647374023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rfrain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rfrain.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:36:57 GMT\r\nexpires: Fri, 13 Aug 2027 07:36:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40757\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48256,"size_decoded":49068,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-13T21:35:16.446689Z","times_seen":26572,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":30,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rfrain.com/wpadmin/dio/adv/","date":"2026-08-13T18:56:14.028Z","timestamp":1786647374028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rfrain.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rfrain.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:36:57 GMT\r\nexpires: Fri, 13 Aug 2027 07:36:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40757\r\nlast-modified: Tue, 09 Sep 2025 18:33:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48256,"size_decoded":49068,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-13T21:35:16.446689Z","times_seen":26572,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":26,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}