{"report_id":"c1a51b10-4cf3-49f6-a1e8-7cf63290606e","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-04-10T15:03:52Z","url":{"schema":"https","addr":"financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":0,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"final":{"url":{"schema":"https","addr":"financeadvice.fit/com","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"title":"Finance Advice","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":0,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T15:03:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-10T15:03:28Z","timestamp":1775833408,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":58670,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-04-10T15:03:28.621305+0000\",\"flow_id\":1137146568146579,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":58670,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3414,\"start\":\"2026-04-10T15:03:28.556691+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-10","alert":"Detects file containing Telegram Bot API","trigger":"financeadvice.fit/lander/advays/js/app.min.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":9,"received_data":322851,"sent_data":4865,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-04-08T15:31:11.762682Z","alert_count":0,"request_count":1,"received_data":539,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"financeadvice.fit","ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"domain_registered":"2026-04-07","domain_rank":0,"first_seen":"2026-04-10T14:57:22.744882Z","last_seen":"2026-04-10T14:57:22.744882Z","alert_count":2,"request_count":26,"received_data":2419588,"sent_data":13997,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":3,"received_data":13772,"sent_data":1407,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-05T22:33:08.106483Z","alert_count":0,"request_count":3,"received_data":304304,"sent_data":1450,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/js/app.min.js","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"md5":"c55661744a7efd2326f542faef3f4389","sha1":"49d0e3b12cf7c30c736b4670195a597022b8e80a","sha256":"2cafb1d1eaf4d573bb39cf8e255d0d6aa6793e433fce400402bd66c4d7b3cf8c","sha512":"cf5c107624a559a1886fcbf2f8868aadb079e016ced27deae543ed5b869270b90a98a03dbf7f1ffab9798596d1d8828c830f075481d1754ab967a94ba4a9d3d4","size":142381,"token":"7853882497:AAFjBI02bH6rc4ZW4U7Qvcf9D8fgvehq1g8","is_revoked":false,"bot":{"token":"7853882497:AAFjBI02bH6rc4ZW4U7Qvcf9D8fgvehq1g8","user_id":"7853882497","username":"financeadvice6_bot","first_name":"адвайс Новый","last_name":"","chat":{"chat_id":"-1002275133023","title":"Fin-Advice Ih","type":"supergroup","bot_is":"administrator","total_users":5,"active_members":null,"admins":[{"user_id":8070652740,"username":"alex08_fb","first_name":"💸🅰️🅻🅴🆇💸","last_name":"","is_bot":false},{"user_id":7853882497,"username":"financeadvice6_bot","first_name":"адвайс Новый","last_name":"","is_bot":true}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.js?_v=20240908200817","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1abede2b1e12c67edde78e0bd9b067f","sha1":"84d63d9c364875e5b36affa7edfd0af2630bcb63","sha256":"bdcdee66eb73eaff67c185ce622c4f82d65cdc893b785259b0207e3e60c8ca9d","sha512":"04d675c77f51307f9463294e5b8d7d6de6863b4c2a75290eee98b5ad80d8728f4e2f7baf5da0bf193a80e4ee0254ada3e0af599280cd4921d590440a920c1d8b","ssdeep":"3072:u/dJ0y8AAYjLs3OwPl0n04XU343EhY2xZ+b+Ihnz15XC7sS8JtZ4mLETQCAtQ59v:adJChoYtxZ+b+IhJDKR","tlshash":"7134ceebda3c9736a1d97b35968eb3cd5a8cbc93c848567826c3b54f53788e0706c205","size":246621,"data":"","first_seen":"2023-03-07T01:27:34Z","last_seen":"2026-08-11T23:10:41.552015Z","times_seen":7927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/js/app.min.js","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"introduction_type":"scriptElement","is_inline":false,"md5":"c55661744a7efd2326f542faef3f4389","sha1":"49d0e3b12cf7c30c736b4670195a597022b8e80a","sha256":"2cafb1d1eaf4d573bb39cf8e255d0d6aa6793e433fce400402bd66c4d7b3cf8c","sha512":"cf5c107624a559a1886fcbf2f8868aadb079e016ced27deae543ed5b869270b90a98a03dbf7f1ffab9798596d1d8828c830f075481d1754ab967a94ba4a9d3d4","ssdeep":"1536:fl899x8T1PrGbHHoCJtsQ3BAdsvQ5bo3+GBQM03WnpTJjz4CGPrCPkV1vn4aPdzL:uGPWD3cb5byQM03HChgZR","tlshash":"89d36f4aa2f225394297b03e4b9bc5107376900b7a49ec983e5c4a185f5d83c97f9ff8","size":142381,"data":"","first_seen":"2026-04-10T15:03:55.204701Z","last_seen":"2026-04-10T15:03:55.204701Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-10","alert":"Detects file containing Telegram Bot API","trigger":"financeadvice.fit/lander/advays/js/app.min.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/com","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"968833958fbd68cf9910dba3f5bff915","sha1":"9ae560fb99c82356728d7c4e2e7dd3a000ba29d6","sha256":"b0994ee04fff7982aec57517d634f931e709f6e0e2d8cb225c4b2ec8cc8274e6","sha512":"d4e14f8057ef787e3528b3b2b307f14b47f9a987527ad5044761649f39236f88c3a2795effa2deeb55d65ecc19f84f34ce23c5b8a1c503aba8b09b9f1955ea50","ssdeep":"","tlshash":"1e1108a231109e9353e165a7ad17be5ce86429992d42405ee0cc3cec1faa50bc6f56f1","size":966,"data":"","first_seen":"2026-04-10T15:03:55.229364Z","last_seen":"2026-04-10T15:03:55.229364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"introduction_type":"scriptElement","is_inline":true,"md5":"968833958fbd68cf9910dba3f5bff915","sha1":"9ae560fb99c82356728d7c4e2e7dd3a000ba29d6","sha256":"b0994ee04fff7982aec57517d634f931e709f6e0e2d8cb225c4b2ec8cc8274e6","sha512":"d4e14f8057ef787e3528b3b2b307f14b47f9a987527ad5044761649f39236f88c3a2795effa2deeb55d65ecc19f84f34ce23c5b8a1c503aba8b09b9f1955ea50","ssdeep":"","tlshash":"1e1108a231109e9353e165a7ad17be5ce86429992d42405ee0cc3cec1faa50bc6f56f1","size":966,"data":"","first_seen":"2026-04-10T15:03:55.229364Z","last_seen":"2026-04-10T15:03:55.229364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js?_v=20240908200817","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf7bdf0ce3f11830af1d3dd0dbf931e","sha1":"958a4413837457b5e3b66ca292736de8286eafa8","sha256":"b0de6c6e01a16a20bab373a1e7f7b5f3ad48d1b85210965d8c956319f8ac329f","sha512":"7838f953bfa1c129087cd76d5f7a05bfb8dbf7e308861450a3b64331380dac48e7f0417b1e42d58f3ae7cbe0a50eea81bb3db2035d3150c9b7d731ebaca926f6","ssdeep":"768:c1D7GzOol+D45YMJR3kWG6UdCDxgtmKg3vTpzaDNCY5R:YfGkWodCFgtmKgNzaxCq","tlshash":"a7d2f9a973511637a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a175734","size":29362,"data":"","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-08-11T23:10:41.555742Z","times_seen":11814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/partners/5.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/partners/5.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1154\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-482\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9aad969ce60523cd61dbf2314168d36","sha1":"9e734383753799d9caed89b2c1f8d95193cebeb4","sha256":"87211d8cc4cacd8d570cc26c8b5018783569dfd1a8f14fb265062947ecfae6b7","sha512":"b89c0830ed42c97988d3fad3cdc4c53cfc426f25ee6082190a6e1f3699d5317c3899990d6fa9681181edb4200a8136a3c35fe434d6c220e054893db5216f058e","ssdeep":"","tlshash":"b9210a6cd960c8e0be61e8a8e2388631e02d6a530d099b61c35920f2781e4c68af35cf","first_seen":"2025-07-02T05:25:22.425546Z","last_seen":"2026-05-06T06:22:45.346278Z","times_seen":19,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/js/app.min.js","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/js/app.min.js HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: W/\"69d774ee-22c2d\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142381,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (624)","md5":"c55661744a7efd2326f542faef3f4389","sha1":"49d0e3b12cf7c30c736b4670195a597022b8e80a","sha256":"2cafb1d1eaf4d573bb39cf8e255d0d6aa6793e433fce400402bd66c4d7b3cf8c","sha512":"cf5c107624a559a1886fcbf2f8868aadb079e016ced27deae543ed5b869270b90a98a03dbf7f1ffab9798596d1d8828c830f075481d1754ab967a94ba4a9d3d4","ssdeep":"1536:fl899x8T1PrGbHHoCJtsQ3BAdsvQ5bo3+GBQM03WnpTJjz4CGPrCPkV1vn4aPdzL:uGPWD3cb5byQM03HChgZR","tlshash":"89d36f4aa2f225394297b03e4b9bc5107376900b7a49ec983e5c4a185f5d83c97f9ff8","first_seen":"2026-04-10T15:03:55.204701Z","last_seen":"2026-04-10T15:03:55.204701Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-10","alert":"Detects file containing Telegram Bot API","trigger":"financeadvice.fit/lander/advays/js/app.min.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:regular,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css?family=Raleway:regular,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 15:03:28 GMT\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7348,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"53921b7294de9daf091d03a31467d867","sha1":"80371b55192ad9c7938dc7c3c01564f45d9c9f8e","sha256":"2f02b1d47879100c67ea7996220acd1e5a3f7975bbb21a80116bc319e1b67ba6","sha512":"79ea74d6d4d2769129ea60de2cb7a857ec73f90cf1c9a0722b7fe4cce70da4e8a1288af9174a6b68a5b1e0a4cd7e02f36a884dcc2ccd08c24b85d2b41089dbe2","ssdeep":"192:4ioTRH+DO9ivTiH9DN0iST/H0DEbiBT4HbDrp:lStobcFwf+Jm1","tlshash":"b9e198a00917d000eb47adc663ce7f36ee5e62053046953e9bfd58f8acaad361394b0d","first_seen":"2025-09-11T04:18:06.52964Z","last_seen":"2026-07-31T18:03:45.068729Z","times_seen":263,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":201,"dns":0,"connect":7,"send":0,"wait":36,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T15:03:27.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /com?key=ads8fj3k2n9x4p7z1q HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 10 Apr 2026 15:03:27 GMT\r\nset-cookie: e3b0c4_2=q4bv0h1pko1jq; expires=Sat, 11 Apr 2026 15:03:27 GMT; path=/; domain=financeadvice.fit; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161167,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8468)","md5":"81bb33e01fe000fb64484a9ac61fe30a","sha1":"3b59f475d586f35b209c450dae7cc1df1db3e0b3","sha256":"e50de765241e3ff5150dc4aa56d891bad17b33c11f5bd7872cf47c8091b7557f","sha512":"af52fe740b19a60eed02ea4cca6a24b90ff77e07a76380717c5bb7cde9e74c161cada692fd8f214eef1f5eeb524b55aeaa45f8157f23b6f6ccfe81cfc321086f","ssdeep":"1536:jMepDxLE3US3SlATtadZodZ6tSASbNlKvlXlp3t3hWeosw+YQGQqbv:j/Dq33ktnN1hWeoIID","tlshash":"51f3c6f013f850b5f002bf95e5156925bda279ff6fd24104b1ed1d996be280cca2b88b","first_seen":"2026-04-10T15:03:55.206362Z","last_seen":"2026-04-10T15:03:55.206362Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":38,"dns":0,"connect":15,"send":0,"wait":31,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/partners/2.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/partners/2.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1528\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-5f8\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88e123466d65ad0a8780657e8458d4cf","sha1":"2ecc2e4dd67913d33c309194378f2db98b47354d","sha256":"019e8703e21642b05b210d617292adfa97494422256073f0a8d66912e961a481","sha512":"9963203faa7d07f1c4c7571ff97f3babaa4dda9d5c402eef6ea1ee558adb717bb4e033daa902b3fd793f44a6853ffc5f5d5f54698821f70b0057b6b79516cbfc","ssdeep":"","tlshash":"7a312a920330a28314ca9b9c68e6cb500516830abd9c39d493ebde73383804bea90d31","first_seen":"2025-07-02T05:25:22.402824Z","last_seen":"2026-05-06T06:22:45.340063Z","times_seen":19,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js?_v=20240908200817","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js?_v=20240908200817 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8889\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f902e0e-72d9\"\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 220081\r\nexpires: Wed, 31 Mar 2027 15:03:27 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htoqIGwYvpVkp70nfQPwvYekowMsKQ9e4iYVgZGRBznASynTVlpEwQuhuiN%2Bw3wfSn8PzQkOdGVaWuM2AGGuEVVR3Tb7zT%2BdPdz9jsFV62jtXrug1Zb24tbWazSC3asfkSjyHJ0w\"}]}\r\ncf-ray: 9ea2a36f598f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26959)","md5":"caf7bdf0ce3f11830af1d3dd0dbf931e","sha1":"958a4413837457b5e3b66ca292736de8286eafa8","sha256":"b0de6c6e01a16a20bab373a1e7f7b5f3ad48d1b85210965d8c956319f8ac329f","sha512":"7838f953bfa1c129087cd76d5f7a05bfb8dbf7e308861450a3b64331380dac48e7f0417b1e42d58f3ae7cbe0a50eea81bb3db2035d3150c9b7d731ebaca926f6","ssdeep":"768:c1D7GzOol+D45YMJR3kWG6UdCDxgtmKg3vTpzaDNCY5R:YfGkWodCFgtmKgNzaxCq","tlshash":"a7d2f9a973511637a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a175734","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-08-11T23:10:41.555742Z","times_seen":11814,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":3,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/css/style.min.css?_v=20240908200817 HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: W/\"69d774ee-cb68\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52072,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52072), with no line terminators","md5":"394e589b6592da5eb139303477cdf13a","sha1":"9b22a05e90b56d4b1b520f73f3ca2a9c59969bd1","sha256":"2b902ffbc355594b08aa015663dc5c6f15c7575f36db1e03a13f05c04914bc9d","sha512":"bab4261a068d5e5ba843b8fef8ef57b28b63c451cbf6a48672e09ed7e2c4865587cda516592157eb36c47725b29dc3505d0b8dbb988c3e329d963d472a9fac5e","ssdeep":"1536:hiDW71juaieGTRZBeBfBqQ1dY13bCu1oBOBfBm:hiDW71juaieGTRZc1cQ1dY1eu1oI1U","tlshash":"6833972e67243048f6af8902b4d3e9e850659806f0568efed5536e8acdc71f342627df","first_seen":"2026-04-02T14:59:41.858295Z","last_seen":"2026-05-06T06:22:45.334671Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/reviews/3.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/reviews/3.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5104\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-13f0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x197, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5622e21c4d746ccf7255c4111f852a85","sha1":"071ffed53d19610474106c2bfa470ca54be13cd4","sha256":"5ebf374346cb7208cf113ce5400d2006a2282cc090f9ce337fba5da23ab219f2","sha512":"6ce894cdf7317a9a1a000ffb9dcb4aa047d03713145960ab319405c9edfadf093afaf7479ac8211a3cf77041744b9f4fe64c8aa3ebb47551ed5c5012b69bd35d","ssdeep":"96:b2fRyq2F1KUD6gHV7UW1rmnigdKnh7h2Y4srohVcER79VDxkvx4L:rV/j6g17UW1rRAKh70thn/lWSL","tlshash":"ecb18eba1b4a4c05fb88d7754e563ed95e8f4601c29880d9c55452e0d17ebf8ce533f0","first_seen":"2025-07-02T05:25:22.415496Z","last_seen":"2026-05-06T06:22:45.31086Z","times_seen":19,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.js?_v=20240908200817","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/js/utils.js?_v=20240908200817 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 45687\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f902e0e-3c35d\"\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 46102\r\nexpires: Wed, 31 Mar 2027 15:03:27 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yT%2BaFSO3ETPtX14GELSuv5oSQkkltHIO4K5OqpEYEuh4bR4hchKnWtBx2EppdcN2U%2B%2FMzMwndajY9Y0CFNuiYbR5t1QQPibbNEJTfrAJwAjCmI8%2Bqrhzr%2FXpxbZjOkpJ9X0wd9sI\"}]}\r\ncf-ray: 9ea2a36f79e35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246621,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1654)","md5":"e1abede2b1e12c67edde78e0bd9b067f","sha1":"84d63d9c364875e5b36affa7edfd0af2630bcb63","sha256":"bdcdee66eb73eaff67c185ce622c4f82d65cdc893b785259b0207e3e60c8ca9d","sha512":"04d675c77f51307f9463294e5b8d7d6de6863b4c2a75290eee98b5ad80d8728f4e2f7baf5da0bf193a80e4ee0254ada3e0af599280cd4921d590440a920c1d8b","ssdeep":"3072:u/dJ0y8AAYjLs3OwPl0n04XU343EhY2xZ+b+Ihnz15XC7sS8JtZ4mLETQCAtQ59v:adJChoYtxZ+b+IhJDKR","tlshash":"7134ceebda3c9736a1d97b35968eb3cd5a8cbc93c848567826c3b54f53788e0706c205","first_seen":"2023-03-07T01:27:34Z","last_seen":"2026-08-11T23:10:41.552015Z","times_seen":7927,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":12,"dns":1,"connect":6,"send":0,"wait":7,"receive":5,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:300,regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css?family=Poppins:300,regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 15:03:28 GMT\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"be46db6a6cc299e056af11ee6fd27719","sha1":"e0d3c2d05f41640b8e0e3821e02e07ebbc601026","sha256":"c8a496048b5755074dac48d12c295e8bc55c39e6101549fbd22c4281201164a0","sha512":"944746656e570d53bfdc9dc1c246103626d17443886405574d3635e1dbb6ef98ad2696f72d2859a6aef93f1d44f4296f31d102dec2e42fdaded9fc44a681b5e1","ssdeep":"","tlshash":"1d419bd1087bd1149b831cc123ce7d37ee1e9255b810e5b86bfd0c98adabc654362b2d","first_seen":"2025-09-20T06:58:11.972547Z","last_seen":"2026-08-08T03:04:34.878203Z","times_seen":267,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":132,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:12:41 GMT\r\nexpires: Mon, 05 Apr 2027 10:12:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 449447\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T07:55:25.23229Z","times_seen":63588,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":55,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/feedback-bg.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/feedback-bg.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817\r\nCookie: e3b0c4_2=q4bv0h1pko1jq; px=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2094\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-82e\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ed55d585f34212c3a5f45a1068a7da99","sha1":"d5bd2f538f7f25c815eaa92e28cca38a8bf3deca","sha256":"1a2de7e1a8d75477bc51c68717af7d54bc8c506426d7e4a65c71f7e5b1f0f74b","sha512":"138bcc566045dc38d746019fc633d41cbe59ae152f4f58555fb7751d3b0c0cb0e8caa1ce984969fd5ebb8c71e85c85ac500e4c5e7e5f9600813c941eab4b5d3c","ssdeep":"","tlshash":"0a41e71ab617032f64df64a07e3d5085f6e87d10c5bc6e435373835895c4673e32aa28","first_seen":"2025-07-02T05:25:22.427567Z","last_seen":"2026-05-06T06:22:45.318341Z","times_seen":16,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css?family=Montserrat:700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 15:03:28 GMT\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1976,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7e117958684a56bdc004e5a736fbaf2d","sha1":"4eba16814797c3966bc65740eb9e7720e0c68688","sha256":"5c226a2d18b554efcf5048ae11ec54758f4e214f2dd02fa4b0962f9cb02b9870","sha512":"338597da56eaad9394ab8af097203e8dad11e0c944e6fe2e7ad5a97fc7d5523aeb1a3046dcd22992072811bd9fd5f85d4ae39c5183ec9ed612ee1f3069be9d57","ssdeep":"","tlshash":"3841cf81111bb500eb4b0cc623cf7e26dd4e656274a0c07aaffd2c98ade9c221735b6d","first_seen":"2025-09-05T01:56:40.684189Z","last_seen":"2026-08-11T22:56:00.126391Z","times_seen":594,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":198,"dns":1,"connect":22,"send":0,"wait":32,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 04:29:38 GMT\r\nexpires: Fri, 09 Apr 2027 04:29:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 124430\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-11T11:00:00.992697Z","times_seen":1231,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":350,"dns":1,"connect":34,"send":0,"wait":15,"receive":2,"ssl":319},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 04:29:38 GMT\r\nexpires: Fri, 09 Apr 2027 04:29:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 124430\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-11T11:00:00.992697Z","times_seen":1231,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":106,"dns":1,"connect":40,"send":0,"wait":128,"receive":2,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/video.mp4","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/video.mp4 HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=229376-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com\r\nCookie: e3b0c4_2=q4bv0h1pko1jq; px=null\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 139004801\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-84c8b81\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 229376-139234176/139234177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":483328,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"fa455818f682b72e002f3b5977d71264","sha1":"6b88f2424f139d34504545abaac5f5fb173fbaed","sha256":"17ff5f8ed0ca53ffec449c3f80420a2526d1127d8c926441e832a59db5675c6b","sha512":"1f4eeb8de2d72ba12699578941184be471329c71acae2983ef31823a85e18e2d2bcdff3a09e50f793aff8fba0c6608a0cbeb150f82f7c06e3d15771d118896ae","ssdeep":"6144:MJOdGMgtvpUSKUCpNiH4gJ7DOUAZV71VzpRkagIoq7HhU0aPaJ+LuumV3XpQMVUH:5UXtjkBKAZl19p9+q7BUXCuO3XyqUQu7","tlshash":"48a423f814bf4d65bd717feb5f5a415ee860c409e66f10413c0d121ea89ad8cc2e1faa","first_seen":"2026-04-10T15:03:55.213883Z","last_seen":"2026-04-10T15:03:55.213883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css?_v=20240908200817","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css?_v=20240908200817 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1970\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f902e0e-62a6\"\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 26089\r\nexpires: Wed, 31 Mar 2027 15:03:27 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N42mou62ofCjhF0MtsNpNZ42sWaaIDqSLV0My%2BpHb1G1TK%2BK6Ej%2FAz2xcIg%2BpATLlauXDeXCXDc4T1m6gnJ%2FaIZhgQRk0Yzi6sB6Q8fyDrjfKxlG396oCmk5KWKDZ0yoy8Y83jDa\"}]}\r\ncf-ray: 9ea2a36f49535ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25254,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a69aa970266649e0b08c2cb4bc166568","sha1":"d9314a52085a2bb6d284421bb18a4c546ecb73d4","sha256":"ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491","sha512":"8315a8c3c328eaaea92dad571ff09c1fc2728920c4b62c0957bf04f83f903f41156ac16cf30297ab5e86f022c3e022764a7a271ebe0b9bfc98d9f488dbe71b9b","ssdeep":"384:HzITF7FWhTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWh/Hib","tlshash":"a4b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-08-12T06:01:33.413262Z","times_seen":29693,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/reviews/1.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/reviews/1.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3700\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-e74\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x197, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d51dfb2b6dadddcaa6a4efc67332a2a5","sha1":"7a35e87cb39b3ec20a0d09196eee946d9d5f1c70","sha256":"92aba61eae5637328864b7d96c5daeae959edfe958a11701cc7a2dfbb9084ea1","sha512":"1245da3ba78ce75b01f1884a72f1a04e50bcab6aeceedf72b4333ab89e5b60e1ea01777259609109e4514a92d2bb04967808ac8a2754147b3b0214cda03e6867","ssdeep":"","tlshash":"ad714e104c52db031140734aadf1bd44652f634ac058cbe52d395a54dddef68e598ed3","first_seen":"2025-07-02T05:25:22.421825Z","last_seen":"2026-05-06T06:22:45.300438Z","times_seen":19,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/reviews/2.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/reviews/2.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4942\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-134e\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4942,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x197, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74f313a6b28c95b99a58bd3b4de17c05","sha1":"844341759b6f76bdd40c5059dd2675557093074b","sha256":"2037da1782a7b1e287fdf14fdf978a7206beb9081526d74584a4669bbba09207","sha512":"11b99402601e996c27227388f4141714e7da382068cc4840dc79617fdf8f67528d7ed59ce07c8173d5e87e696720e33274d6479b9918db53d57a8fcb5d12b3a1","ssdeep":"96:OORKI0uCTk7Hrb7+yFm8SsVpUvJ9/etdrgQgs8kPd6JBXM2Dbgtbjb:dJEkrU8TVWRJ+xgQzd16fXXb4b","tlshash":"aea17d1130b4a5366d77798db05028945ccd7fb2b366bb9a94727431ca2aad2e00137d","first_seen":"2025-07-02T05:25:22.401248Z","last_seen":"2026-05-06T06:22:45.30933Z","times_seen":19,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/cisco-decor.svg","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/cisco-decor.svg HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 205829\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-32405\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205829,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40b4bc280f9ca420cec11cb7e5f710da","sha1":"ef52038ee72c00d0c6fd063aded75627b55c60dc","sha256":"48c421700b4135e20b01b617e65834becfa80ba637d40cdbca832db0cfb8e27c","sha512":"4967290ad09ebfbe83c834775ce8e8de16c0c5559613190ecfd494302f2baf6fdcb23ee4b3b4808c3e9b59218b2e7ff3b1fc48bb0c2bf8f73d18bf45d87972f7","ssdeep":"3072:HeN/kromfk2UUcUhFgVvmxW8rQMmxUnp+oNZRO9lS/Xvl8XNuKuZpWrV6911IFa6:HeN/krO2Hca8O9cMqUBsc/flAj/4GclQ","tlshash":"dc1404764c1e6a5f73725c2ecb07283e7e9255eca20990cfa8cf70fdc2665149a64cb4","first_seen":"2025-07-02T05:25:22.426122Z","last_seen":"2026-05-06T06:22:45.328649Z","times_seen":19,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:12:41 GMT\r\nexpires: Mon, 05 Apr 2027 10:12:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 449447\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T07:55:25.23229Z","times_seen":63588,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":250,"dns":1,"connect":31,"send":0,"wait":24,"receive":2,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/preview.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/preview.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24402\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-5f52\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98ca7a1a7c7e2daab7435a90383d4c58","sha1":"a79c5d08e574eb0668b5e9b47376b669e0cb672b","sha256":"1b101f8c8bef5f51e5588b2cf35d1bbc2b63d8fc493adc461ba5109e415a7f07","sha512":"b53580e9a7805c00e0a6b874ed25659d673ebde60067957e5513fb53b94be3f520819addfc1eec4e4dec301b83129c278038b918775e247cbae872809336777a","ssdeep":"384:SCqsQOnQLhY5m8U9JyBFcohoSlBGDvcx6HCUu3Trs4wH82xh8kz2dS6io2YjIWI:SCqqEJEmt1jCU+PsTTCk6TrjC","tlshash":"47b2f197be15d3d1f0e82002ddf1a90297b99a2f6e34d8169c2be15b238081720ffb5d","first_seen":"2025-07-02T05:25:22.416654Z","last_seen":"2026-05-06T06:22:45.29814Z","times_seen":19,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:12:41 GMT\r\nexpires: Mon, 05 Apr 2027 10:12:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 449447\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T07:55:25.23229Z","times_seen":63588,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":132,"dns":1,"connect":30,"send":0,"wait":130,"receive":2,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 04:29:38 GMT\r\nexpires: Fri, 09 Apr 2027 04:29:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 124430\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-11T11:00:00.992697Z","times_seen":1231,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":110,"dns":0,"connect":18,"send":0,"wait":16,"receive":17,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/fonts/TTNorms-Bold.woff2","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/fonts/TTNorms-Bold.woff2 HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22080\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-5640\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22080,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22080, version 1.0","md5":"35b29b9c139bacbdd286e8dc9370f59e","sha1":"c39bfddc93687e192d0fea17696f1dd9fe6647f1","sha256":"6a616797883ab2dc1f217d6cb398a0ef07e555ad651d23223b0b35e729f02b67","sha512":"81cac750e3bf25e009f0947853c392547aa296b3fdd61d5b32e86ea3443fa5427ddd67c1d2ae3511a1f32d7e1066473d02e12c991f9581e9230a650715ba5aa1","ssdeep":"384:0I/rmYVHWhiI+6+bgWu8zS/wiE+gmgL5kvUKdkYJwo6HjwMMp6x2iLsC:L/rvV2269R8O/aAK5F8DJwo6Hjw3C","tlshash":"5ba2d150dea37e9ed53d1d91f3326217718e49078eeeeb2263cca4d107104c6b47d9a5","first_seen":"2025-07-02T05:25:22.404451Z","last_seen":"2026-05-06T06:22:45.353313Z","times_seen":19,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:15:52 GMT\r\nexpires: Mon, 05 Apr 2027 10:15:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 449256\r\nlast-modified: Thu, 04 Sep 2025 17:09:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18824, version 1.0","md5":"1c0792ac34ef600f99d93bc272a31080","sha1":"ae5da15d6686e876f61d4b94af769f22e65c06d5","sha256":"f9d9e65b15372cebcafc3acd1e664a564c5c4b23278de4d5760de9a13c530371","sha512":"c07164aa922caa6a95da016802a6371d727edb560d91dd8069db4b5d88f8a90e89aa0e77d7174455953a19908523959a64d3a1c05c3e3f4f9675f73504f7963c","ssdeep":"384:Xr/E9GyFdjOVDIyf4sfiVMy7ebj70FLAubHpEDysFaCY9bt64wJY1:XbJybOVDNwspy7kYVrpjsFaVph","tlshash":"4e82e1f94816b1abce56c237833938497510eea48365725b17158c184ecc97f8ddfa43","first_seen":"2025-09-05T07:31:34.656521Z","last_seen":"2026-08-12T03:21:49.648607Z","times_seen":8804,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":42,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/fonts/TTNorms-Light.woff2","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/fonts/TTNorms-Light.woff2 HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21864\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-5568\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21864, version 1.0","md5":"6d0454ad6a7f9622fbdac38aa6b976a1","sha1":"d6cd2b5fc92ebd5ffabd67869a8671a40ac3ddec","sha256":"16a1c679fd414c0484f9e2c8dfe63d2ca0556d17e5ebf9390737f46a2bface81","sha512":"cc1b3b06fa9a3699a5036309d03982d5099fc71c2d63153f3c4c0e26d17442ec7aa384b5a62128b26d02e9134678c31abf8a90990564fb9e54396419b4e54934","ssdeep":"384:m3HdFNvyjQcur58FoAFHqZNwt7vUCXwmdsE/UdP1bv3pU5k1QxN5rZG4w+gsO9dZ:m3H7ly8kFTFKZIamdsSsBv3p2FZiDsO5","tlshash":"3ea2e1212afb93ae56d40036dba0820cb5b31113c3615b0353a5c9e09f56f7cbeabd99","first_seen":"2025-07-02T05:25:22.418169Z","last_seen":"2026-05-06T06:22:45.336281Z","times_seen":19,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 04:29:38 GMT\r\nexpires: Fri, 09 Apr 2027 04:29:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 124430\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-11T11:00:00.992697Z","times_seen":1231,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/partners/3.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/partners/3.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 422\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-1a6\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07ddda2831cb3ac92df59f182be01d58","sha1":"d8828d96e53abac0bdcd87046a5d463517ae43a8","sha256":"106c0a773c05901c55004d446331129569b58083fc765c193ea6701cbb7dfda1","sha512":"1d865c32f683857c1a9c4e8982f72671b247970bf720cbb06d7c37300db867675ca9e9db556d43c85a34aaf31a4a4f112ae866d6e7837a71506885e2c9e3dba5","ssdeep":"","tlshash":"eae0ab28483fe5d5c06a7c30656bb60862a600ef285aaff55259b4e8061001956b14a9","first_seen":"2025-07-02T05:25:22.41433Z","last_seen":"2026-05-06T06:22:45.341126Z","times_seen":19,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:12:41 GMT\r\nexpires: Mon, 05 Apr 2027 10:12:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 449447\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T07:55:25.23229Z","times_seen":63588,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":148,"dns":1,"connect":37,"send":0,"wait":113,"receive":2,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/fonts/TTNorms-Regular.woff2","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/fonts/TTNorms-Regular.woff2 HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22116\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-5664\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22116, version 1.0","md5":"6e0678da3a7e70271ed6518eaa952ae2","sha1":"b898b6c9d8cd57aa48fcea5eebb81313e4fae2a6","sha256":"71433db6e864e04517eac2d7e7ab8cc9c2eb5cd81ede419c3811671f9abeec71","sha512":"96500e14f203d92cc8e3f74ba6eadd5239ea2a840e4333c6495c899e696b23b9efc66e2f77ce98964de24d250988fb7b9765b53db7545de1448d10f3fa86ad08","ssdeep":"384:6t7tCMFmo172b2FhQGbn8ZzbjNlC7FrcJ2xOXaDU492BaHXEH7DM4:6thC6moR2KnQ68ZxcKJmACfivM4","tlshash":"e9a2d0d18060900ef2288454cc982b6d567a0afbdb0faf7dede29ccdb3141d7460b5d9","first_seen":"2025-07-02T05:25:22.410664Z","last_seen":"2026-05-06T06:22:45.351616Z","times_seen":19,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/fonts/TTNorms-Medium.woff2","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/fonts/TTNorms-Medium.woff2 HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21640\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-5488\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21640, version 1.0","md5":"1b8885fc6a15060dcf60fe26d95f9014","sha1":"f51d231dcb8800f916325fbf47d9c00e591cb568","sha256":"8a9ea70aeb0fc9199fef2fd2c6b568fd7d21eb11789d0b9dc67faa0aa173341e","sha512":"9776494b18678c15814ee21eba896afcee8d0854994da0adf7cbd2967a9bc6934ebb71b2901813632dfa32987829bb1e8d4a4683f3561e8d35264d1670a89ab6","ssdeep":"384:jmuh/po9DV1ixtZ2aGtENYNHOFV7FwX34oqsExQoB+kGgyei3Ln3StR4p70hmX:6MxoZ34vvN2uXFy34Zcg+k27GR4pcK","tlshash":"5ca2d00ad98f7a16c47302ed916fbbb9171f0e9b914ac6b328bcc37091d64759923847","first_seen":"2025-07-02T05:25:22.426876Z","last_seen":"2026-05-06T06:22:45.293868Z","times_seen":19,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/video.mp4","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/video.mp4 HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 139234177\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-84c8b81\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-139234176/139234177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1040321,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"363e98e7df7cd14ee506d80c65e979d0","sha1":"522356c4d8e2a84484f987e0cd49c0676a0b3c0b","sha256":"a239af51ae4b3bd40cca4f5b76b9dd14446768344d01638b8e6a1b378f5bcaa8","sha512":"08da5b24f7a6d24fea4da97389a9511c0f28c76243d29804d5eac873594b05d637e13d050ffbc4943eaa87bb88fcaa98c281a82598d4269417216ff7c1336688","ssdeep":"24576:IsQLrVKrGXtjkBKAP1l/0CuoX4PnP8oZuuqOQ:zMVKGO3HMpoIPnP8Duqd","tlshash":"662523f918be5d50bfb22a8d9a4fd12fd4c1c044cb5dd1039819579ca2efa9842c37ad","first_seen":"2026-04-10T15:03:55.222153Z","last_seen":"2026-04-10T15:03:55.222153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/json","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 17:34:23 GMT","end":"Wed, 17 Jun 2026 17:34:22 GMT"},"fingerprint":{"sha1":"46:EE:4F:2A:8F:A9:1C:FF:C1:D1:E0:E0:F3:F9:46:3D:35:3D:99:A0","sha256":"7F:8C:02:5E:AA:BB:83:7C:17:1B:48:B5:1A:1F:AE:02:D4:EF:7B:D0:A8:AF:9D:62:8A:3E:14:8F:66:E7:C8:4D"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://financeadvice.fit/\r\nOrigin: https://financeadvice.fit\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":280,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"adf22d9a8ca3a97a9ff78909b8702358","sha1":"f5046826566a7e98d6b5e5c7b0a65677c3bde708","sha256":"756edd1454b049c1370e83c864bc93dfdd82f44d8f9752b3068e5a11867a5de3","sha512":"182391c8c01e54481853a09aa4cf8072496850e45863b198721d0d572e3aa93d8fe11a90bfb24cf97fa64cc132f1594c379474db65db5a1d2207694f770443b9","ssdeep":"","tlshash":"c3d02b6621341b37aeed455c8406960622656e1f1642369f0fe72b0c100c87334f03ae","first_seen":"2023-04-17T17:28:07Z","last_seen":"2026-06-07T07:46:18.554959Z","times_seen":58786,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":180,"dns":19,"connect":32,"send":0,"wait":150,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/partners/6.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/partners/6.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1382\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-566\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da05853a0f1072f71110267717b1722f","sha1":"7dd024e4dced0e1bde1eb2178f280598a3d030fc","sha256":"0dc3ed0fb2fe401e6dafc897f349b2cffe33cfe02700e974d7db33d3b7beef83","sha512":"1fa1dd8a3add40dc9dbc455c14216c68e2bea644ee3be7aafdb12f939ede8aa0c639912a2152b8a57e113982263aa0f22eadf072bcdc7f3f47d6d9d4f86736e2","ssdeep":"","tlshash":"8821b660623588bb61156e21f3eb45dc18527c7468312ea386606efd238f9e559e0c8e","first_seen":"2025-07-02T05:25:22.421117Z","last_seen":"2026-05-06T06:22:45.299389Z","times_seen":19,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/support.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/support.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21992\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-55e8\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 570x540, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b8aea10d32581d5cd1da953a2049c8d","sha1":"742c8594f8f95b094ad6e33a0c3909f17a084a39","sha256":"cd65dd9d59e25992cd6c3530101be709c52b1701aa7765ac2d80b99cf01ccc08","sha512":"233ddece2214fba64594ff43c0e37187b0ddac3aaad1ca159a58f06655be92b7565d693dfd21d55214692ab8b58e0a3844b98130bc78e76c2d8f4636a8cc05ef","ssdeep":"384:15pV9hFVDDe1tb2BLWS6HrTEfABWixBA/0uue/Du98hgYgl2Qm0iZ1JBd+cH4M9a:TpV95Q24HrT0ABtxBrJeE8Qe0iZ1pDHi","tlshash":"05a2d088346bfb22da7482f23686ed955c665f3bd2c0b516b70b6b0a051eedf1c0d910","first_seen":"2025-07-02T05:25:22.428174Z","last_seen":"2026-05-06T06:22:45.325448Z","times_seen":19,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/head-bg.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/head-bg.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817\r\nCookie: e3b0c4_2=q4bv0h1pko1jq; px=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48768\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-be80\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8788b5c2c0bde549337eb3ce7d78e69b","sha1":"38034f4104f9f7c55ebb150d66cb77173ac1cc14","sha256":"79d4946c37082336993f02feeb959951ad0e966675098a87167023bbb809e890","sha512":"e470d14a632f9931720db87daaac3a3955c5101e1d5c7d9885c7198cd024dfdaf44db8b7d05ab364feaac3af505c84b13d33344bd84797092cf252dc8b282e14","ssdeep":"768:f4ZTUNwnzByPF5AdOcSdnSU1Scy668LqGgUGjj98C+tAs2uT0WgtkwFuBH9Jv/X/:fWTUNwndy/A0nSWry668LqGgrnx1fWgw","tlshash":"1d230263456b7046bf29b118b842faf175f11cfa3e1cc4ed183a6b6e8f505e418fa219","first_seen":"2025-07-02T05:25:22.405427Z","last_seen":"2026-05-06T06:22:45.314861Z","times_seen":16,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/sliders-image/bg.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/sliders-image/bg.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/lander/advays/css/style.min.css?_v=20240908200817\r\nCookie: e3b0c4_2=q4bv0h1pko1jq; px=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3608\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-e18\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d3a49dc756d90f6d89ca81a18530c36","sha1":"163500d5a24404d5685cdb34ffa684e9f6d390c1","sha256":"ecc8b48186632762a9898d9f1d019e36095f462aa85bc147d74c32e6d3758bfc","sha512":"7a202bbaff2cd6fdca9dad19396f370bb27885545ecfda32415b3cacacbf3c31f6c49c187fe486aced393eb01279ed99cfb6f0019f0a6a7c4dcb42e91544a00b","ssdeep":"","tlshash":"e6715c0ca07e022a0517654acd7827f3075873dfd1609eb19e774fcb83651c2e2d2e02","first_seen":"2025-07-02T05:25:22.423549Z","last_seen":"2026-05-06T06:22:45.356456Z","times_seen":16,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/video.mp4","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/video.mp4 HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=139132928-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com\r\nCookie: e3b0c4_2=q4bv0h1pko1jq; px=null\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 101249\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-84c8b81\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 139132928-139234176/139234177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101249,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"45b79c5becd12744e3741fb0f93ce4ae","sha1":"417c0131cbc01b467ef4cfb59774a6b93776cc66","sha256":"f70ca2d7c61c662dd961aa307f217a0a60fb31c4075c7181b27d82f4d45d2476","sha512":"2494e3d4321b9587ac3f681b9a7a8fd9bbe8dc04405d645972a2fae22f8754bed269c911d1db027114a0e8b89b5a8e28c5d3a9a67071fbbaf9cced01242ec811","ssdeep":"768:HlLy+4ZiFcvJRXp0WZiWYrmEgT+BW3+nIR3u/rcKpPOhZKWB55XmEd4sMW0U4T35:FL2uE/TaW0I4ge2hV5dyVogyxojbf","tlshash":"d3a3a0a8f728400bea62573584d117607b34e5b03753434f43e9a33eec6b3a99e571ea","first_seen":"2025-07-02T05:25:22.408097Z","last_seen":"2026-05-06T06:22:45.305542Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/favicon.ico","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:28.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/favicon.ico HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq; px=null\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:28 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 17085\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-42bd\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17085,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"4a18773b2ab8a7d94015f2889e4d38e2","sha1":"6c71d884ee369c11a8343c3a352a144db7a309a2","sha256":"51af22b71a6d26940f3c7d0744ba2e3cb94307df719ac84e3117fbc97a974d34","sha512":"8163d85e7dac75a5980b55ab42254d8d9df32525189c0d54385d3e533ebd492f5b904bdcae7224c18eb75115ca4c8040a9b6648e0018b0872ede79bfb7ca03bf","ssdeep":"384:m1KhIz74bwM36pNpBXtS/XpAtbRF/HACTSd:mchaY3kEpAd/Had","tlshash":"1a72d05606a9d60e7c36b48b325cd5bbc44b8cd211a50ec7f471de5e2e9470b6ea3340","first_seen":"2025-07-02T05:25:22.398966Z","last_seen":"2026-05-06T06:22:45.324857Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/partners/1.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/partners/1.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1510\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-5e6\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ab7653c4628dbf573f2f490ddc235be","sha1":"2866d82c69e875c4f689de577a2f234d38404733","sha256":"ee88ca85f2acff7575e0f5d349993fd308d8dd75188c8d7189d08a454b83f73b","sha512":"f03855bf00bc280669c1bd456fca6e035943a8f5fe83f7872e2adbb4408dafbec65c4f19a5f11ad9d6f7e742ac0871667a0070483c3a13e80bd74c5ecb26d13c","ssdeep":"","tlshash":"08314c3cfab2d3d9ca0213303f7e0dac98c29c5457520923f288786a38d2c0b893803c","first_seen":"2025-07-02T05:25:22.424803Z","last_seen":"2026-05-06T06:22:45.296802Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"financeadvice.fit/lander/advays/img/partners/4.webp","fqdn":"financeadvice.fit","domain":"financeadvice.fit","tld":"fit"},"ip":{"addr":"185.236.228.131","port":443,"asn":47674,"as":"Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q","date":"2026-04-10T15:03:27.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financeadvice.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 09:42:43 GMT","end":"Wed, 08 Jul 2026 09:42:42 GMT"},"fingerprint":{"sha1":"CC:B0:6D:7B:3A:8C:F9:02:3B:AD:9E:22:DE:6E:36:3C:53:46:55:2E","sha256":"FE:FB:1B:28:07:D9:BF:58:A0:57:25:DC:A5:6B:A2:66:F6:CF:59:AE:5D:01:64:15:0E:27:36:EE:B2:D9:74:AB"}}},"request":{"raw":"GET /lander/advays/img/partners/4.webp HTTP/1.1\r\nHost: financeadvice.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q\r\nCookie: e3b0c4_2=q4bv0h1pko1jq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 15:03:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 758\r\nlast-modified: Thu, 09 Apr 2026 09:44:14 GMT\r\netag: \"69d774ee-2f6\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e818ca5666fe22788745e10175f556e8","sha1":"1d05fd940dd6268350eec796319e8ad5d3fcf45c","sha256":"0f59246e4997a53f339d702c7568b20dade2a651e0e84e7f061763d317022eb4","sha512":"4149f2ded794e533dc23eefc5170fcf67b6fbeff19c65bdfafe2eaeb2aaa5ce05b8c1636ac981228369f75ce8e56a950d64130d871d4a2c24c5bd4111a239582","ssdeep":"","tlshash":"c00170b3da0c8ccfd62d2d2f2ae2d28480c95ac004946abde19136ec2da158d14b2a05","first_seen":"2025-07-02T05:25:22.400117Z","last_seen":"2026-05-06T06:22:45.286023Z","times_seen":19,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}