{"report_id":"cc564261-d4d4-4723-bc2d-af7f56288338","version":6,"status":"done","tags":[],"date":"2026-05-18T19:47:27Z","url":{"schema":"https","addr":"returnitback.net","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"104.21.11.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"returnitback.net/","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"title":"Home — Tracking Global Financial Fraud","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T15:28:01.656173Z","times_seen":17692056,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"returnitback.net","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"104.21.11.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T19:47:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"returnitback.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-14","domain_rank":0,"first_seen":"2026-05-18T19:47:28.718878Z","last_seen":"2026-05-18T19:47:28.718878Z","alert_count":0,"request_count":10,"received_data":1608076,"sent_data":11111,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Three.js","description":"Three.js is a cross-browser JavaScript library and application programming interface used to create and display animated 3D computer graphics in a web browser using WebGL.","website":"https://threejs.org","common_platform_enumeration":"","icon":"Three.js.svg","categories":["JavaScript graphics"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":5,"received_data":246835,"sent_data":2780,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-17T22:21:01.756487Z","alert_count":0,"request_count":1,"received_data":15848,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-05-18T06:58:11.855617Z","alert_count":0,"request_count":2,"received_data":815988,"sent_data":824,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-17T22:41:40.561616Z","alert_count":0,"request_count":3,"received_data":787858,"sent_data":1327,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-18T00:48:33.232476Z","alert_count":0,"request_count":1,"received_data":95616,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"returnitback.net/images/badge-forensic.png","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /images/badge-forensic.png HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 281263\r\nserver: cloudflare\r\nlast-modified: Fri, 15 May 2026 05:11:23 GMT\r\netag: \"44aaf-651d43e767685\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bz5dDmTjA0ayNO6vuzGDKFQsEfcXFt%2BeAZzQlPNIxcof2v2mcC7ce%2BV9P2DszSltJFADaO%2FxyRBVixXaIom3RPbGJnFoUxZs51ymTV3PSMf%2FdHNAbC6jubG4Y5lY69SOryZq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fdd5f29b82935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"90813663b70d076d955f57904a964556","sha1":"94cde91d980f3068826fc3c855fe69b40a5765b6","sha256":"42475ffe986fdec1d1c8d2d4c0b7a8a5399a5c92ce398d27f7e88a4b727c3ded","sha512":"4f010094c6dea4a11806d8a602542c3df492d5a5e304afb1fbf6431e296273e92457916984cd5bb526d853efcef34f9daaaf23e9d36ae9ded50b22ffcb59acdf","ssdeep":"6144:WGMlTB/rL93FehQbQdhEvHgszBpbqh+5iINHp:WZltPtFe0QXEvAszTqdIP","tlshash":"f65423552169970c3dd8806ef4421063dd9f833b8bbe46fa56262c8930b5c8f2a35bf6","first_seen":"2026-05-18T19:47:33.017596Z","last_seen":"2026-05-18T19:47:33.017596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:06.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://returnitback.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541033\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T15:26:28.657505Z","times_seen":251882,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":215,"dns":6,"connect":7,"send":0,"wait":12,"receive":20,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/favicon.png","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:07.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1358\r\nserver: cloudflare\r\nlast-modified: Fri, 15 May 2026 05:08:53 GMT\r\netag: \"54e-651d435881ffd\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYq2rW7gOAZQkAaFfxMG2VtPbeKrHCjmnzPs4peT09%2FOVf8gCVR9EL3zcKja%2FNqRGBlDCdDFWrCfeObq%2BjWjDpgxGqm4v1y2l0nCJfIuzstrd20HDmWRWJ%2FGxX%2Fg4KgWYmdj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fdd5f35dbe835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ee4fad8f2eca893e651271188e6ebb48","sha1":"cffee79401e168adcae637e3544d2e8664390eb9","sha256":"c99967b8a8ebc2f0f0c6766494225be4aecca7e2fa6d913ebcbcbd2c762c99d3","sha512":"bfbbdba230e1634593b34cbb4a40d784ed1dc6d42e736e0cc287da6decb808bd60a5a12e08813f5dbb5b44572c3e4ccced8da3b05df3e0c7be23bb15d2386393","ssdeep":"","tlshash":"1a212bd0b5bbcc704aa4b3520c734480986b0a0d417f299cf11f3024aebf25b10eb4e5","first_seen":"2026-05-18T19:47:33.019981Z","last_seen":"2026-05-18T19:47:33.019981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 18 May 2026 19:47:05 GMT\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b8d3b4b9d4ee8cae44e2afcef48e7a93","sha1":"ea3c361f22fa31fb8612dd2ca30f1ac7ba03f75b","sha256":"7c966efd5a04f87920e8cef5c332c73b0d529b21c46fa312ff0020047d882c35","sha512":"7418cc24da4237fed57bbd3e92618985c30c29ab320908f146d0fe954c6a49e179007537480bfc7f2bf76e76a47da055c6cb6fb2744991e0c3a471c88fc06f08","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3L+:vXuM0p2+g7GQK","tlshash":"c2628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T12:17:30.699497Z","last_seen":"2026-08-03T13:07:43.843884Z","times_seen":4286,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":75,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/images/badge-trusted.png","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /images/badge-trusted.png HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 179864\r\nserver: cloudflare\r\nlast-modified: Fri, 15 May 2026 05:11:23 GMT\r\netag: \"2be98-651d43e7666e5\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2BDOvt60TRlzBGgzO61EUQHAU1E8CbDSw9IQShLznDoH1SSI0%2F3%2Ft3WVUtjGmjDr2jzoGGiTZcIwwkcJvvwPFNeydkduxDpz2megrtd3157dl3iBF7llSi8yR4iJxK4GRNFH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fdd5f29a81435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"eea433c6b35e5dfce540586dda283510","sha1":"db73b4c391baca3381c7067bd2cf2da108a477cd","sha256":"0d3945a3e726f2571bc2512c70c60ce96bb7240258cd94ef68686a7ddff4306d","sha512":"16b261fa7201209114edcc29de955716d38a64c1ff610ebf3ec52fb98e4d912bde57cac4b63c2814a4923a32b5fc534851dadc0b331eb632c60ab33acd0a7af4","ssdeep":"3072:d06E0XMDaikKkphYN/T7hyp7T62rShtAfnIAXeEULxs6E2UNt9PbrrHlxu:d0aXMDTkKkch+Hq2vIdEyU28tVvrFxu","tlshash":"9a04235da37f45592254a117af54f6b6886bb3cac2e34330d3d8e34e7a0adbc60618dc","first_seen":"2026-05-18T19:47:33.022239Z","last_seen":"2026-05-18T19:47:33.022239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\ncontent-type: application/javascript\r\nexpires: Wed, 20 May 2026 19:47:05 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kImT76i6UN7n95A2wRxpyiOWrUF09YyxGgMVpU%2B%2Bd1RVa6h0TAIK6ZEIyyQeoehmphmu1MBesBVs8dVr5cbaYt%2BVWXc5kK3lkyPb9giCcjXtecOHODmI7wgheN1Sw2TdQsKw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fdd5f29b82e35a6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-03T15:19:09.252946Z","times_seen":413833,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/images/hero-bg.png","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:06.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /images/hero-bg.png HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 103591\r\nserver: cloudflare\r\nlast-modified: Fri, 15 May 2026 05:11:23 GMT\r\netag: \"194a7-651d43e767685\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XcsqxP1lfnEqC5DuCZRBCAxHlbYErGgZ7CgnkJEH6kLYHHaH6PRdSwzgcdJNpqobODMXD%2FNeZC6ITLhg%2FeLSuy3U1KdPgefdsfpJPz2nETJ%2BN1qg7Os7OAu3nx3lPrp35geI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fdd5f2f3b7935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103591,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x576, components 3","md5":"4d682c32dffebc72527d8e3ff73add66","sha1":"757221201f88d8ba761a702fcf3bec9014a0bf32","sha256":"0b1b0df575709bbd8ea9d21b278ce5919365a8e55f7aa80c38f4a07f4819448c","sha512":"521354473ff7733df43d8c28c2e3cc71fb652b83128ad91097efd8d1e08a7b64eeecf92bda53d9236689e58a3aa46d4b03d4a8f46cf1b99d596a209740e7a08a","ssdeep":"1536:gD+zbOgHPLlcLlEqKc95pIRMLztT9RG5dR2GUL3rUOUCTjyPbLxWw7wsv0:TXO+Giq995pIUtTmR3QpUCcxWSv0","tlshash":"73a30227efba3ae2fc0d0eb360c68615c735626e2d17e4769686381c7237556c85c363","first_seen":"2026-05-18T19:47:33.024194Z","last_seen":"2026-05-18T19:47:33.024194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:06.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://returnitback.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541034\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T15:26:28.657505Z","times_seen":251882,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":238,"dns":3,"connect":22,"send":0,"wait":15,"receive":12,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:06.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://returnitback.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541034\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T15:26:28.657505Z","times_seen":251882,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T19:47:05.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; expires=Mon, 18 May 2026 21:47:05 GMT; Max-Age=7200; path=/; domain=returnitback.net; samesite=lax\nreturnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D; expires=Mon, 18 May 2026 21:47:05 GMT; Max-Age=7200; path=/; domain=returnitback.net; httponly; samesite=lax\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cF5ux57A6m8CaXy5TMzEZeRknnCLEOw2T9bPDSBl7HPNw9tWwJT226bjCDOz2Wm%2FcR14PMcMJg0n4hdo%2B2%2BYDlJQzTrXT%2BrQW95OZw3YafQBvTX0UE5suDPjORbisA7H%2FOOy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fdd5f26de5a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Three.js","description":"Three.js is a cross-browser JavaScript library and application programming interface used to create and display animated 3D computer graphics in a web browser using WebGL.","website":"https://threejs.org","common_platform_enumeration":"","icon":"Three.js.svg","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":68295,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (608)","md5":"a4ee3ae2dbce1fa9b5446bf1165d8220","sha1":"366166e83e568cfca2585b9c65248077f26ee030","sha256":"39aa1dc4d47d9a4693cb1ed7bd27287040b5ad1ee562179aa49aa8a8c04e239e","sha512":"da9f9870041c1a2d2a045e8cc22681284fa10a611d337ededdf4412914e3d957264e6318d3a1224490a504c551f3267b97c4b021dd6f9e6d26b43a1863799467","ssdeep":"768:2GUP6PSRJNLUqc/DU/L0Q72KlkacGWvfOZx2t83Llv/:0Cm94ulv/","tlshash":"30637871a1f114af71e3c1e9b662671a6a58f747e50b8a4c77bc12e12fcac16cc132b4","first_seen":"2026-05-18T19:47:33.025252Z","last_seen":"2026-05-18T19:47:33.025252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":52,"dns":35,"connect":1,"send":0,"wait":235,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/images/badge-encrypted.png","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /images/badge-encrypted.png HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 383566\r\nserver: cloudflare\r\nlast-modified: Fri, 15 May 2026 05:11:23 GMT\r\netag: \"5da4e-651d43e767685\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pXL%2FrBB7ZJP%2B6liR%2BE4rqesO%2FeZI49z7kJoyysFb68tUXrNP%2FhtmrQkHfpes3I8%2BGFLkuFU3hoDPOOV2dut8uCtfWc8%2FXwr4hca77SofEo6pXW%2BF4Pp3afwvnP2TirOkYmmX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fdd5f29b82735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6e0db4ff6c62cf856ffd072b189f4733","sha1":"7b4838f0bba0e1305ca8743758e21d639cf7a453","sha256":"62df974baf9b56657226e1435110471c552d1962cb2e962122f224baa48781ca","sha512":"56d2f9ffa8915d40d74a8fd94fdc1d85d20d60c1b3f2360fdaae41c06daea9bea047e88b1fda587e5fb7fde1183b1462dc0b068d7d16a2a1518e48afe74cb25c","ssdeep":"6144:scoA2Vmp1AQWx4iXsTedlsh00Bw8XG/0eIj3rzq78bCUJCrJ5fDQN:V2Max4icTedlsF4/1Ij3rwYrJY7Y","tlshash":"488423ed60e0c316613e26b59c13810241eab6e978ef3991f95dfc7969118d13caeecc","first_seen":"2026-05-18T19:47:33.026408Z","last_seen":"2026-05-18T19:47:33.026408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://returnitback.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::vhhlv-1778775055415-ee1be01c049f\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 358568\r\nlast-modified: Thu, 14 May 2026 16:10:57 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdgGt0fZQyMwxz4hJZMiiU46Ik%2Fqk1oXFYRlf69v1adxaF5kr47qkhukrk752Kmoh5J73FalN61H9DPcLm5mt3DGavkwWOGNEcP7a89P6qyhNZaxV%2FdiPcD05yqy7Cc3NPp2yzc%3D\"}]}\r\ncf-ray: 9fdd5f2a2b1956bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-03T15:27:22.228296Z","times_seen":47887,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:06.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://returnitback.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541034\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T15:26:28.657505Z","times_seen":251882,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":245,"dns":1,"connect":8,"send":0,"wait":26,"receive":4,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bdss2-1779133312676-ba24fe0f7d60\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 313\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOt0bsHhpF8nwBMV%2FeMym5cvL7VHjTsWYCPA%2FGs4lnTlRMboykHUDS134L0GIZU0YvVlRNXQyxm4vQ8tFPcFl3PIdYJXRGs8sEfOOK2SmaU69r3C9p1Wkyx%2Be%2FG4knLW6M4Yndw%3D\"}]}\r\ncf-ray: 9fdd5f2a0ad656bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T15:28:01.656173Z","times_seen":17692056,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":48,"dns":21,"connect":1,"send":0,"wait":8,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.12.5/dist/ScrollTrigger.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/gsap@3.12.5/dist/ScrollTrigger.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.12.5\r\nx-jsd-version-type: version\r\netag: W/\"a974-SJvPbZxp8PKfhx4DI1EMUZeFm/U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\nage: 1108143\r\nx-served-by: cache-fra-eddf8230076-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 18016\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43380,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43088)","md5":"ba1fa78eb4bb49f8a0eeaf8e61708840","sha1":"489bcf6d9c69f0f29f871e0323510c5197859bf5","sha256":"ad33c2df9ada8a663c2147357828f980d0b7ca731ef33eb3c6e4f327c3b2cda5","sha512":"a2731344a2412b3f0cd539eaa83b86065a30947d28845ccc5d844d79bcfec8e71ce5342bff300ab2d87386ebf4862c942848901105c4ca79d70af3533a4e7476","ssdeep":"768:L+5LHpwfVyb83wG/B/nE306RAHdAIsxmAK31horUp45:apqgo3wKB/nKRAHOIKS3TjK","tlshash":"741309ca3244b03267df627aa52f030a733654d9291e4464f266e4e83c7d5bc873be6d","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-08-03T07:05:04.208731Z","times_seen":6740,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":63,"dns":1,"connect":28,"send":0,"wait":80,"receive":10,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/gsap@3.12.5/dist/gsap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/gsap@3.12.5/dist/gsap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.12.5\r\nx-jsd-version-type: version\r\netag: W/\"11a16-LSb0wGBJGsmA0JymhziNNhAlbrc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\nage: 2666192\r\nx-served-by: cache-fra-eddf8230133-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 29091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72214,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65255)","md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-08-03T07:20:09.417854Z","times_seen":8486,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":71,"dns":1,"connect":28,"send":0,"wait":74,"receive":10,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/images/badge-compliance.png","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /images/badge-compliance.png HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 293195\r\nserver: cloudflare\r\nlast-modified: Fri, 15 May 2026 05:11:23 GMT\r\netag: \"4794b-651d43e7666e5\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JK0Wh0JMOG4i1jFU2KABNCTMeU3rYOF2WFX6uwFiuDgNHBbzwGxUsfIP8MyIqyBJBeB5t57hS98BdD1DRZV%2FCpEE9I8P3fL8EvA7DIfsSCU88BeXBCavjKhLrxMx%2Fun2NRIY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fdd5f29b81835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"a53a7b4f78b2f74961406d8ad822e021","sha1":"a0194da26ad301dcfcb522d6b465b0e7a19e3f15","sha256":"4139d5f0b70f3667c7b60d4f2eac53b9f0636a4678edb716bc2adeb3d117cace","sha512":"8a23fc96c11e12f810a79d9ae03fbd9bbf06c6b6e45cea4e6eb4f24bf1e99abd61a5c20376593c09c5fa0e372952f301c0ec5bd59dfe5eaf8c4f68ef8e949fc6","ssdeep":"6144:QEdHZk/ftwGzPfolKDNxPqeGrp/4Yxt9RZ1MT5XA7Yx:F/6faGfolQNxyeGrh4Yx7fKT5XA7I","tlshash":"5d542343bcb31b208c750c25e0b3360fee6c87a692d6d85e2d79b512d3fa5c64b12d66","first_seen":"2026-05-18T19:47:33.029875Z","last_seen":"2026-05-18T19:47:33.029875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/images/seal-forensic.png","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /images/seal-forensic.png HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 281263\r\nserver: cloudflare\r\nlast-modified: Fri, 15 May 2026 04:57:21 GMT\r\netag: \"44aaf-651d40c4def9b\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9KcGlRYTT76tadKKLtBXTkE99StYNErEc21txPXsRqb6i98U94qn9KXKtOQ10CwCHkHlhhZEeWPUJjDD46MCb7zsD2clkRyVHoTLr42MQ76gw19GQshkq5zDEwwe%2Fk%2BHGl2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fdd5f29b82c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"90813663b70d076d955f57904a964556","sha1":"94cde91d980f3068826fc3c855fe69b40a5765b6","sha256":"42475ffe986fdec1d1c8d2d4c0b7a8a5399a5c92ce398d27f7e88a4b727c3ded","sha512":"4f010094c6dea4a11806d8a602542c3df492d5a5e304afb1fbf6431e296273e92457916984cd5bb526d853efcef34f9daaaf23e9d36ae9ded50b22ffcb59acdf","ssdeep":"6144:WGMlTB/rL93FehQbQdhEvHgszBpbqh+5iINHp:WZltPtFe0QXEvAszTqdIP","tlshash":"f65423552169970c3dd8806ef4421063dd9f833b8bbe46fa56262c8930b5c8f2a35bf6","first_seen":"2026-05-18T19:47:33.017596Z","last_seen":"2026-05-18T19:47:33.017596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:06.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://returnitback.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:29:53 GMT\r\nexpires: Wed, 12 May 2027 13:29:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541034\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T15:26:28.657505Z","times_seen":251882,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":261,"dns":5,"connect":21,"send":0,"wait":27,"receive":2,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three-globe@2.31.0/example/img/earth-dark.jpg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:07.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 May 2026 17:38:50 GMT","end":"Tue, 11 Aug 2026 18:38:47 GMT"},"fingerprint":{"sha1":"85:3A:E3:4D:41:9A:40:A5:EA:4D:21:21:BC:8B:AF:E9:9B:B2:27:3A","sha256":"41:2C:5C:27:2E:1B:0A:16:BA:4A:09:22:08:86:E9:EC:B5:B9:C4:CF:94:00:3A:8F:52:77:35:8C:F9:C4:FC:A4"}}},"request":{"raw":"GET /three-globe@2.31.0/example/img/earth-dark.jpg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://returnitback.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 19:47:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94795\r\ncf-ray: 9fdd5f3279dd1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 18 May 2027 19:47:07 GMT\r\nlast-modified: Mon, 18 May 2026 19:47:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:i486TiWEKLbmaaB5n7i28tsVxiQIJdanx1ljgptXaZQ=:\r\nfly-request-id: 01KRNJ550DBTPZHNHA58YJYTNG-fra\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2048x1024, components 3","md5":"646e641765bfde4bf557809752329ecc","sha1":"649bbc6d8179f33368f97dd68f9405f020fae6c2","sha256":"8b8f3a4e258428b6e669a0799fb8b6f2db15c6240825d6a7c75963829b576994","sha512":"0e209645a16b345d17a6aaa23e8cc96f238b5eae06e4f01cdb1f56e6e31bef4e89bb2574946463eb27e013b46619e60a15d7602642bce5b401e6f17ca37e889d","ssdeep":"1536:IP2QpHdsZh/8W89wUWMRC3BDW9Coudmjj9laTDU1VCssxxkXfcCizDs6:IPJpHdy8p2KmBDaCrdVTDWFszR","tlshash":"96930217eb03474acdc8abf2805742b63476d77669c1460b26f7a9a8e5ec3103ecb61c","first_seen":"2023-12-07T21:01:17Z","last_seen":"2026-07-21T20:14:01.321284Z","times_seen":26,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":103,"dns":81,"connect":1,"send":0,"wait":157,"receive":4,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/three@0.160.0/build/three.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/three@0.160.0/build/three.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.160.0\r\nx-jsd-version-type: version\r\netag: W/\"a38bc-zKu2w7D+ZpoqVxVG4Qm7tD7DH6Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1628222\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\nx-served-by: cache-fra-etou8220071-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 166412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":669884,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65208)","md5":"bc138621ece88793eb711a9e967b273a","sha1":"ccabb6c3b0fe669a2a571546e109bbb43ec31fa6","sha256":"170c6789f43217c96b3170f4b42fafe135de7f7cd48497a4218f9757ee1d49fa","sha512":"be79a7fd0aa7e9a1b43ce01cf66206ce3ab42326ebbf125760369f36fa7d2529c31b1785de96e44aa2ef7fe60677992eeb7a53eec6bf8f11e7eff774994f3eb4","ssdeep":"12288:8D/7dQPuCFfMJFxzWd5z1QWJoBLX/XqgLuIFZyLLbVQhgX/46y+p+fvZiK:67dUucfMJFxzWd5z1QWJoBLX/XqgLuI7","tlshash":"7be46ca1327120374e4399d750b50542e22a78973406c5acba2cfcdb78a9895f1fffb9","first_seen":"2025-06-01T21:38:57.62103Z","last_seen":"2026-08-02T22:16:13.699048Z","times_seen":172,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":62,"dns":1,"connect":30,"send":0,"wait":28,"receive":64,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"returnitback.net/images/logo-icon-color.png","fqdn":"returnitback.net","domain":"returnitback.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://returnitback.net/","date":"2026-05-18T19:47:05.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"returnitback.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 02:30:55 GMT","end":"Thu, 13 Aug 2026 02:30:54 GMT"},"fingerprint":{"sha1":"35:5F:52:4A:E4:5F:74:E6:54:3D:7E:53:06:4D:AD:A3:B3:27:A7:08","sha256":"05:81:43:85:64:33:53:47:67:AC:BA:CA:AA:81:D2:77:2B:1C:60:6F:08:0A:A3:32:D2:2E:29:F2:7C:20:2D:8A"}}},"request":{"raw":"GET /images/logo-icon-color.png HTTP/1.1\r\nHost: returnitback.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://returnitback.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6InVKbVZhcmdjVno4MkxuN295REhrTGc9PSIsInZhbHVlIjoiZ0E1cy83RnVjVmZuK2xwZ3BYNXhUbWd3bUJHcm9nZjNnM2lIVnY5M0x0Zm1tV0Fvd3JBc0tSYy9zMXNOdE1FM3FKVldpM1JFL1d0bjJBWEREYVErVlpXQ2JjVERrRGNPRVp5NzNwRnlJRHhKQlRsQVFUcmM5ZEVPQ2kzYmdFTksiLCJtYWMiOiJiMzc1NjhlOTFjMTUzZDRmMDU2ZmRlNDQ2YzI0OTdhYzIyNzZlYmJiZjU1MWJkYzM0MDA5YWZjNDc1NjczNmIzIiwidGFnIjoiIn0%3D; returnitback-session=eyJpdiI6Ind6ZFlVR01JYjhTY2c3Q1BFdGxYRXc9PSIsInZhbHVlIjoicGVoeStmbjcyYXBTVER1cVMvYnJDY00zZDFpYk1uN3dmdXQ3Zks0KzdSV25ETHlPQ2FOY21OUnFpUzJuNVpFV1BqZGdtWVAwbVZNdnlXcUg1REV4UkV3QjdmWlJYMUo5cU5YYW1JRGtmcjFDUXZMUXhCL25CMTlGdVZpUmxmejQiLCJtYWMiOiI5Y2VmYmE0MzUyMmRmNDA0Zjc1NDM2YTcyODEzYmNkZWMyYTUzNGNkMjY4YzhkN2QyOWRmM2Q2NGQzNGMwMWExIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 19:47:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 6657\r\nserver: cloudflare\r\nlast-modified: Fri, 15 May 2026 05:05:36 GMT\r\netag: \"1a01-651d429d435a2\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cc0TM5GdWPc4obdYDGFi4iATG3UnyZ6hxfOn7NxXq3PPwql76NmjrFzdZRPuT4mZfVli2%2Fo15vXfHJRpsRxd7NpudyF4pdd5zq8lEuHnp54GtUlEpEuKI2V3g2LPoG113YnZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fdd5f29a80f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"865f3a55b41e4b0709e0004032f20ac5","sha1":"becd931f8ff16e4cc98af59c8f218a7fbab2e62a","sha256":"633974dfb731f1d1493d24f1a9c929726e3e47a5f2508239dd5124d97618fee6","sha512":"c5c981989b3c64da655bbf4fe9ef668d6930712f3e51fe76900e15817731558a1259a02747015412f4d0670e05a589b0af814a7f18d4ba2fa285b2f1f2be7777","ssdeep":"192:xGhMQy8zH1rxLVxsSvZf+Xa+Yl4AqP+AYrb4aPuS9ewc6lhj:xGs8zH19Lz+hm4764aPdbbj","tlshash":"ccd1cff7e5121bf4e2c43d310db094ae2c454b1d264cc92a824470af7c22b36389335d","first_seen":"2026-05-18T19:47:33.032466Z","last_seen":"2026-05-18T19:47:33.032466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}